CVE record · 2 sources
CVE-2026-77680
CVSS 5.3An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix.
- Vendor
- Canonical
- Product
- Ubuntu
- CVSS
- 5.3
- Exposure class
- Operating system
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
libsoup vulnerabilities
USN-8890-1 fixed vulnerabilities in libsoup. This update provides the corresponding updates for libsoup3 on Ubuntu 26.10. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A…
-
An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix.
An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a…