{"id":"CVE-2026-15713","title":"Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak","summary":"A vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaust…","severity":"medium","cvss":5.9,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvssSource":"cna","cwe":["CWE-772"],"vendor":"Red Hat","product":"libsoup3","affected":["libsoup3 (all versions)","libsoup","libsoup","libsoup (all versions)","libsoup (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-07-15T13:43:55.364634Z"},"published":"2026-07-14","updated":"2026-11-06","sourceUpdated":"2026-11-06T17:54:17.625Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-15713","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-15713"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2499941","label":"RHBZ#2499941"},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/work_items/541"}],"tags":["cve.org"],"epss":0.00349,"epssPercentile":0.28681,"ingestedAt":"2026-11-06T18:00:12.493Z","slug":"CVE-2026-15713","body":"## Overview\n\nA vulnerability was found in libsoup's HTTP/2 protocol implementation. The library fails to correctly release memory context blocks under specific stream termination conditions, such as when an HTTP/2 connection encounters window exhaustion or explicit stream resets. A remote, unauthenticated attacker acting as a malicious network peer can trick the connection engine into allocating stream states that are subsequently leaked during cleanup. Over a sustained period, this flaw allows the remote attacker to consume the system's heap allocations incrementally, triggering a denial of service (DoS) through an ultimate Out-of-Memory (OOM) application crash.\n\n## Affected\n\n- `libsoup3 (all versions)`\n- `libsoup`\n- `libsoup`\n- `libsoup (all versions)`\n- `libsoup (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nUsers should avoid connecting to untrusted HTTP/2 servers. Implementing network egress filtering to restrict outbound connections to only trusted destinations can reduce exposure to this vulnerability.","depth":"sunlit","depthScore":33,"depthScoreParts":{"impact":32.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}