NTLM Authentication Flaw in Libsoup HTTP Library Impacting GNOME Applications

CVE-2026-0719

What is CVE-2026-0719?

A vulnerability has been discovered in the NTLM authentication handling within the libsoup HTTP library, which is utilized by GNOME and various other applications for network interactions. This flaw arises when the library processes overly long passwords, leading to an internal size calculation overflow due to the incorrect handling of signed integers. Consequently, this overflow may cause improper memory allocation on the stack, resulting in unsafe memory copying. Applications that rely on libsoup could experience unexpected crashes, thus creating a potential denial-of-service condition.

References