CVE-2026-2369 MEDIUM

CVE-2026-2369: Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

Vendor Red Hat
Product Red Hat Enterprise Linux 10
Weakness CWE-191
Published March 19, 2026
Last update April 28, 2026

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service.

Key dates

02Disclosure timeline

March 19, 2026 CVE published
April 28, 2026 Record updated