CVE-2026-4271CWE-416

Libsoup: libsoup: denial of service via use-after-free in http/2 server

Medium · published March 17, 2026

CVSS v3.1
5.3
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs in the HTTP/2 server implementation. A remote attacker can exploit this by sending specially crafted HTTP/2 requests that cause authentication failures. This can lead to the application attempting to access memory that has already been freed, potentially causing application instability or crashes, resulting in a Denial of Service (DoS).

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00861 · 58.1th percentile
Weakness
CWE-416 · Use After Free
Published
2026-03-17T11:14Z
EPSS history
Timeline
  • 17 MAR 11:14Z
    Libsoup: libsoup: denial of service via use-after-free in http/2 server
    cvelistv5