HTTP Range Header Processing Vulnerability in libsoup by GNOME
CVE-2026-77014

5.3MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
20 August 2026

What is CVE-2026-77014?

A vulnerability exists in libsoup's handling of HTTP Range headers, particularly in its SoupServer component. The implementation of the sort_ranges() comparator within soup-message-headers.c improperly truncates a 64-bit subtraction result to 32-bit integer values. This leads to incorrect sign handling for range offsets that exceed the INT_MAX threshold. As a result, when making requests for byte ranges from resources exceeding approximately 2 GB, the server may silently omit the requested byte ranges in HTTP 206 Partial Content responses. This flaw can disrupt the expected behavior of applications relying on libsoup for handling large data transfers.

References

https://access.redhat.com/security/cve/CVE-2026-77014
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2520143
issue-trackingx_refsource_REDHAT
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/550

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Zhengxiong Luo (National University of Singapore) for reporting this issue.
.