CVE-2026-12549CWE-805

Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver

Medium · published June 22, 2026

CVSS v3.1
4.8
EPSS
0%
Percentile
28.2
In the wild
Unconfirmed
What it is

The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range request with a suffix length exceeding the content size, the resulting negative start value is not properly clamped, leading to malformed HTTP 206 responses and log flooding.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.2th percentile
Weakness
CWE-805 · Buffer Access with Incorrect Length Value
Published
2026-06-22T13:55Z
EPSS history
Timeline
  • 22 JUN 13:55Z
    Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver
    cvelistv5