SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-12548

MEDIUM · CVSS 4.2 EPSS 0.24%

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

A heap out-of-bounds read vulnerability in libsoup affects applications that parse multipart HTTP messages, where an integer type mismatch can lead to incorrect truncation of the length parameter. This flaw may allow remote attackers to crash the application or potentially disclose sensitive heap memory contents. Developers and security teams using libsoup should prioritize addressing this issue to mitigate the risk of exploitation.

CVE
CVE-2026-12548
Severity
MEDIUM
CVSS
4.2
EPSS
0.24%

Original NVD Description

A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse() can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to crash an application using libsoup or potentially disclose heap memory contents.