CVE-2026-1761CWE-121

Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response

High · published February 2, 2026

CVSS v3.1
8.6
EPSS
1%
Percentile
64.7
In the wild
Unconfirmed
What it is

⚡ A sneaky stack-based buffer overflow in libsoup is like a party crasher showing up with a fake invitation! 🎉 Think of libsoup as a restaurant that serves fancy multi-course meals. If a customer slips in a dish that’s much larger than expected, it can cause the kitchen to overflow with chaos, just like how this flaw can cause memory corruption when parsing multipart HTTP responses. An attacker could exploit this vulnerability to crash applications processing untrusted server responses, leading to potential arbitrary code execution. This means they could take control of the application and run their own malicious code without needing anyone's permission! Talk about a virtual heist! 🔥

Put simply

Think of libsoup as a restaurant that serves fancy multi-course meals. If a customer slips in a dish that’s much larger than expected, it can cause the kitchen to overflow with chaos, just like how this flaw can cause memory corruption when parsing multipart HTTP responses. This vulnerability occurs due to incorrect length calculations during the parsing of multipart HTTP responses, allowing an attacker to craft a specially designed response that causes a stack-based buffer overflow.

What to do

An attacker could exploit this vulnerability to crash applications processing untrusted server responses, leading to potential arbitrary code execution. This means they could take control of the application and run their own malicious code without needing anyone's permission! Talk about a virtual heist! 🔥 To mitigate this vulnerability, ensure you update libsoup to the latest version that fixes this flaw. Also, review your application’s handling of untrusted server responses to enhance its security. 🛡️ You've got this! With a few updates, you can lock down your application and keep those virtual party crashers out! 🚀

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01075 · 64.7th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-02-02T14:01Z
EPSS history
Timeline
  • 02 FEB 14:01Z
    Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response
    cvelistv5