CVE-2026-102555
Fixed in a distro release EPSS <1%CVSS 8.2
A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI.
Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | libsoup3 | 3.6.5-3.el10_2.20 |
| AlmaLinux 10 | libsoup3-devel | 3.6.5-3.el10_2.20 |
| AlmaLinux 10 | libsoup3-doc | 3.6.5-3.el10_2.20 |
| Debian 12 | libsoup2.4 | no fix |
| Debian 12 | libsoup3 | no fix |
| Debian 13 | libsoup2.4 | no fix |
| Debian 13 | libsoup3 | no fix |
| Debian 14 | libsoup3 | 3.8.0-1 |
| Red Hat Enterprise Linux 10.2 | libsoup3 | 0:3.6.5-3.el10_2.20 |
| Red Hat Enterprise Linux 10.2 | libsoup3-debuginfo | 0:3.6.5-3.el10_2.20 |
| Red Hat Enterprise Linux 10.2 | libsoup3-debugsource | 0:3.6.5-3.el10_2.20 |
| Red Hat Enterprise Linux 10.2 | libsoup3-devel | 0:3.6.5-3.el10_2.20 |
| Red Hat Enterprise Linux 10.2 | libsoup3-doc | 0:3.6.5-3.el10_2.20 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | libsoup | 3.0.4-150400.3.55.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | libsoup | 3.0.4-150400.3.55.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | libsoup | 3.0.4-150400.3.55.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | libsoup | 3.0.4-150400.3.55.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | libsoup | 3.4.4-150600.3.59.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | libsoup | 3.0.4-150400.3.55.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | libsoup | 3.0.4-150400.3.55.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | libsoup | 3.4.4-150600.3.59.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | libsoup | 3.0.4-150400.3.55.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | libsoup | 3.0.4-150400.3.55.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | libsoup | 3.4.4-150600.3.59.1 |
| Ubuntu 22.04 LTS | libsoup2.4 | no fix |
| Ubuntu 24.04 LTS | libsoup2.4 | no fix |
| Ubuntu 24.04 LTS | libsoup3 | no fix |
| Ubuntu 26.04 LTS | libsoup3 | no fix |
| Ubuntu 26.10 | libsoup2.4 | no fix |
| Ubuntu 26.10 | libsoup3 | no fix |
| Ubuntu Pro 16.04 LTS | libsoup2.4 | no fix |
| Ubuntu Pro 18.04 LTS | libsoup2.4 | no fix |
| Ubuntu Pro 20.04 LTS | libsoup2.4 | no fix |
| Ubuntu Pro 22.04 LTS | libsoup3 | no fix |
| Ubuntu Pro 26.04 LTS | libsoup2.4 | no fix |