https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:21:57 +0000 https://cve.radiocsirt.org/vuln/cve-2026-15712 <p><strong>Affected:</strong> Red Hat Enterprise Linux 10</p> <p>A heap buffer over-read vulnerability was discovered in libsoup&#39;s (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the &#34;Additional Debug Data&#34; payload by assuming the data stream is a safely NUL-terminated C-string. Because the parser lacks strict length-boundary verification before reading this data, a remote, unauthenticated attacker can intentionally send a malformed GOAWAY frame missing the appropriate null delimiter. This causes the library to read past the end of the allocated buffer, triggering an application crash that results in a denial of service (DoS), or potentially exposing fragments of memory contents.</p> <p><strong>Affected:</strong> Red Hat Enterprise Linux 10</p> <p>A heap buffer over-read vulnerability was discovered in libsoup&#39;s (versions: libsoup 3.0 to 3.7.0) HTTP/2 connection tracking framework. When the library processes an HTTP/2 GOAWAY frame, it improperly handles the &#34;Additional Debug Data&#34; payload by assuming the data stream is a safely NUL-terminated C-string. Because the parser lacks strict length-boundary verification before reading this data, a remote, unauthenticated attacker can intentionally send a malformed GOAWAY frame missing the appropriate null delimiter. This causes the library to read past the end of the allocated buffer, triggering an application crash that results in a denial of service (DoS), or potentially exposing fragments of memory contents.</p> https://cve.radiocsirt.org/vuln/cve-2026-15712