CVE-2026-0719

A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in incorrect memory allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may crash unexpectedly, creating a denial-of-service risk.

Published Jan 8, 2026

https://access.redhat.com/security/cve/cve-2026-0719

CVSS ScoreHigh

8.6

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2026-0719

A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in incorrect memory allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may crash unexpectedly, creating a denial-of-service risk.

Published Jan 8, 2026

https://access.redhat.com/security/cve/cve-2026-0719

CVSS ScoreHigh

8.6


rpm	libsoup	2.28.2-1.el6
rpm	libsoup	2.28.2-1.el6_1.1
rpm	libsoup	2.28.2-4.el6
rpm	libsoup	2.34.3-2.el6
rpm	libsoup	2.34.3-3.el6_6
rpm	libsoup	2.34.3-5.el6
rpm	libsoup	2.42.2-3.el7
rpm	libsoup	2.46.0-3.el7
rpm	libsoup	2.48.1-3.el7
rpm	libsoup	2.48.1-6.el7
rpm	libsoup	2.56.0-3.el7
rpm	libsoup	2.56.0-4.el7_4
rpm	libsoup	2.56.0-6.el7
rpm	libsoup	2.62.2-2.0.1.el7
rpm	libsoup	2.62.2-2.el7
rpm	libsoup	2.62.3-1.el8
rpm	libsoup	2.72.0-10.el9_6.2
rpm	libsoup	2.72.0-10.el9_6.3
rpm	libsoup	2.72.0-8.el9
rpm	libsoup3	3.4.4-5.el10
rpm	libsoup3	3.6.3-1.el10
rpm	libsoup3	3.6.5-3.el10_0.6
rpm	libsoup3	3.6.5-3.el10_0.7
rpm	libsoup3	3.6.5-3.el10_0.9
rpm	libsoup3	3.6.5-3.el10_1.6
rpm	libsoup3	3.6.5-3.el10_1.7
conda	main/libsoup-cos6-i686	2.34.3
conda	main/libsoup-cos6-x86_64	2.34.3
conda	main/libsoup-devel-cos6-i686	2.34.3
conda	main/libsoup-devel-cos6-x86_64	2.34.3
conda	main/libsoup-devel-cos7-s390x	2.62.2

Ecosystem	Package	Version


rpm	libsoup	2.28.2-1.el6
rpm	libsoup	2.28.2-1.el6_1.1
rpm	libsoup	2.28.2-4.el6
rpm	libsoup	2.34.3-2.el6
rpm	libsoup	2.34.3-3.el6_6
rpm	libsoup	2.34.3-5.el6
rpm	libsoup	2.42.2-3.el7
rpm	libsoup	2.46.0-3.el7
rpm	libsoup	2.48.1-3.el7
rpm	libsoup	2.48.1-6.el7
rpm	libsoup	2.56.0-3.el7
rpm	libsoup	2.56.0-4.el7_4
rpm	libsoup	2.56.0-6.el7
rpm	libsoup	2.62.2-2.0.1.el7
rpm	libsoup	2.62.2-2.el7
rpm	libsoup	2.62.3-1.el8
rpm	libsoup	2.72.0-10.el9_6.2
rpm	libsoup	2.72.0-10.el9_6.3
rpm	libsoup	2.72.0-8.el9
rpm	libsoup3	3.4.4-5.el10
rpm	libsoup3	3.6.3-1.el10
rpm	libsoup3	3.6.5-3.el10_0.6
rpm	libsoup3	3.6.5-3.el10_0.7
rpm	libsoup3	3.6.5-3.el10_0.9
rpm	libsoup3	3.6.5-3.el10_1.6
rpm	libsoup3	3.6.5-3.el10_1.7
conda	main/libsoup-cos6-i686	2.34.3
conda	main/libsoup-cos6-x86_64	2.34.3
conda	main/libsoup-devel-cos6-i686	2.34.3
conda	main/libsoup-devel-cos6-x86_64	2.34.3
conda	main/libsoup-devel-cos7-s390x	2.62.2

Find vulnerabilities. Fix fast with AI.

CVE-2026-0719

CVE-2026-0719