CVE-2026-12548
Publication date 21 July 2026
Last updated 21 October 2026
Ubuntu priority
Description
A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soup_headers_parse() can cause the length parameter to be incorrectly truncated, leading to a heap buffer over-read. A remote attacker could use this flaw to crash an application using libsoup or potentially disclose heap memory contents.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| libsoup2.4 | 26.10 stonking |
Needs evaluation
|
| 26.04 LTS resolute |
Vulnerable
|
|
| 24.04 LTS noble |
Vulnerable
|
|
| 22.04 LTS jammy |
Vulnerable
|
|
| 20.04 LTS focal |
Vulnerable
|
|
| 18.04 LTS bionic |
Vulnerable
|
|
| 16.04 LTS xenial |
Vulnerable
|
|
| libsoup3 | 26.10 stonking |
Vulnerable
|
| 26.04 LTS resolute |
Vulnerable
|
|
| 24.04 LTS noble |
Vulnerable
|
|
| 22.04 LTS jammy |
Vulnerable
|
Severity score breakdown
CVSS version: CVSS v3.0
Base score
4.2 · Medium
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
References
Related Ubuntu Security Notices (USN)
- USN-8975-1
- libsoup vulnerabilities
- 3 November 2026
Other references
- https://www.cve.org/CVERecord?id=CVE-2026-12548
- https://gitlab.gnome.org/GNOME/libsoup/-/work_items/512
- https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/524
- https://gitlab.gnome.org/GNOME/libsoup/-/commit/7334c38f1f6aa5e64207cb415cf2509838c52b37 (3.7.1)
- https://access.redhat.com/security/cve/CVE-2026-12548
- https://bugzilla.redhat.com/show_bug.cgi?id=2489996