Поиск уязвимостей
Количество 11
Количество 11
CVE-2026-102555
A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI.
CVE-2026-102555
A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI.
CVE-2026-102555
A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI.
CVE-2026-102555
Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding
CVE-2026-102555
A flaw was found in libsoup. The soup_uri_decode_data_uri() function i ...
GHSA-vfxx-hcqj-vrh4
A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI.
ELSA-2026-83618
ELSA-2026-83618: libsoup3 security update (IMPORTANT)
SUSE-SU-2026:4631-1
Security update for libsoup
SUSE-SU-2026:4616-1
Security update for libsoup
openSUSE-SU-2026:22181-1
Security update for libsoup
ALT-PU-2026-17416
ALT-PU-2026-17416: package `libsoup3.0` update to version 3.8.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-102555 A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI. | CVSS3: 8.2 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-102555 A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI. | CVSS3: 8.2 | 0% Низкий | 2 месяца назад |
 | CVE-2026-102555 A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI. | CVSS3: 8.2 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-102555 Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding | CVSS3: 8.2 | 0% Низкий | около 1 месяца назад |
| CVE-2026-102555 A flaw was found in libsoup. The soup_uri_decode_data_uri() function i ... | CVSS3: 8.2 | 0% Низкий | около 1 месяца назад |
| GHSA-vfxx-hcqj-vrh4 A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI. | CVSS3: 8.2 | 0% Низкий | около 1 месяца назад |
| ELSA-2026-83618 ELSA-2026-83618: libsoup3 security update (IMPORTANT) | 26 дней назад | ||
 | SUSE-SU-2026:4631-1 Security update for libsoup | 29 дней назад | ||
| SUSE-SU-2026:4616-1 Security update for libsoup | 29 дней назад | ||
| openSUSE-SU-2026:22181-1 Security update for libsoup | 12 дней назад | ||
| ALT-PU-2026-17416 ALT-PU-2026-17416: package `libsoup3.0` update to version 3.8.0-alt1 | CVSS3: 9.8 | около 1 месяца назад |
Уязвимостей на страницу