CVE-2026-15712

Microsoft · Published July 17, 2026

5.9

CVSS v3.1

MEDIUM

Patch availableGet patch

Description

Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption. Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption

Affected Products

azl3 libsoup 3.4.4-16 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H