HomeDefectsLIN1021-21678
Acknowledged

LIN1021-21678 : Security Advisory - libsoup&libsoup-2.4 - CVE-2026-2443

Created: Mar 1, 2026    Updated: Mar 30, 2026
Found In Version: 10.21.20.2
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. When processing specially crafted HTTP Range headers, the library may improperly validate requested byte ranges. In certain build configurations, this could allow a remote attacker to access portions of server memory beyond the intended response. Exploitation requires a vulnerable configuration and access to a server using the embedded SoupServer component.