Homepage

Stack-based Buffer Overflow The advisory has been revoked - it doesn't affect any version of package libsoup3  (opens in a new tab)

Threat Intelligence

EPSS
0.62% (48th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU2510-LIBSOUP3-14953513
  • published15 Jan 2026
  • disclosed8 Jan 2026
Report a new vulnerability Found a mistake?

Introduced: 8 Jan 2026

CVE-2026-0719  (opens in a new tab)
CWE-121  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:25.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream libsoup3 package and not the libsoup3 package as distributed by Ubuntu.

A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in incorrect memory allocation on the stack, followed by unsafe memory copying. As a result, applications using libsoup may crash unexpectedly, creating a denial-of-service risk.

References