CVE-2026-2369Disclosure(gnome / libsoup)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch gnome libsoup systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service.

gnome CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

https://gitlab.gnome.org/GNOME/libsoup/-/issues/498

Vendor / third-party advisories

Weakness type (CWE)

CWE-191

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

libsoup

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-03-19); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

gnome

Products

libsoup

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-19	1	Patch1
2026-03-23	1	Disclosure1
2026-03-25	1	Disclosure1

Full discourse3 posts

WindowsForum@windowsforum200d
Disclosure
🧨 Integer underflow + zero-length resource = libsoup playing roulette with your buffers. Congrats, everyone gets a possible info leak/DoS. Fix your stack, Microsoft won’t. #WindowsSecurity https://windowsforum.com/threads/cve-2026-2369-libsoup-integer-underflow-causes-buffer-overread-on-zero-length-resources.407181/ #IntegerUnderflow #LibsoupVulnerability #BufferOverread https://t.co/X6PbwwKGBn
Post summary
The tweet warns that libsoup’s integer underflow can lead to a buffer overread and potential info leak or DoS, but it offers no PoC, exploit, patch, or active exploitation evidence.
0000045
1.0K followersView on X
CVE@CVEnew202d
Disclosure
CVE-2026-2369 A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow… https://www.cve.org/CVERecord?id=CVE-2026-2369
Post summary
The entry reports a new integer underflow flaw in libsoup that causes a buffer overread, but offers no PoC, exploit code, patch, or signs of active exploitation.
00000101
56.8K followersView on X
Volerion@VolerionSec205d
Patch
🚨 CVE-2026-2369: Remote integer underflow in GNOME libsoup 3.6.1+ lets crafted zero-length payloads crash apps or leak data. Patch now to keep desktop and server software stable! Full advisory ➡️ https://volerion.com/vulnerabilities/CVE-2026-2369 #infosec #Linux #OpenSource
Post summary
The tweet highlights CVE‑2026‑2369, a remote integer underflow in Gnome libsoup that can cause crashes or data leaks, and urges users to apply the available patch.
0000057
55 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	gnome	libsoup	-	-	-

Explore more

Back to dashboard gnome CVEs libsoup vulnerabilities