CVE-2026-2443: Libsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure
A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.
Other sources
Libsoup: out-of-bounds read in libsoup handlepartialget() leading to heap information disclosure
— Microsoft
Out-of-bounds read vulnerability in the handlepartialget() function of libsoup when processing HTTP Range headers. The issue occurs because the end value of the byte range is not properly validated against the total response size. If GLib is compiled with GDISABLECHECKS, the call to gbytesnewfrombytes() may create a slice that exceeds the bounds of the original buffer. A specially crafted HTTP request with a large range value can cause heap memory beyond the intended response body to be returned to the attacker. This vulnerability can be triggered remotely without authentication or user interaction, potentially exposing portions of server heap memory.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2443?
CVE-2026-2443 has been classified as a medium severity vulnerability due to the potential for heap information disclosure.
How do I fix CVE-2026-2443?
To fix CVE-2026-2443, upgrade to the latest version of libsoup where the issue has been patched.
What impact does CVE-2026-2443 have on my system?
CVE-2026-2443 can lead to unauthorized access to sensitive information stored in heap memory due to improper validation of HTTP Range headers.
Which versions of libsoup are affected by CVE-2026-2443?
CVE-2026-2443 affects multiple versions of libsoup prior to the implementation of the fix in newer releases.
Is CVE-2026-2443 easy to exploit?
Exploitation of CVE-2026-2443 requires sending specially crafted HTTP requests, making it moderately complex but feasible for targeted attacks.