AZL-99915
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99915.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-99915
- Upstream
- Published
- 2026-09-04T08:17:16Z
- Modified
- 2026-09-13T06:06:36Z
- Summary
- CVE-2026-85197 affecting package libsoup 3.4.4-16
- Details
-
A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file body is being read asynchronously. This can lead to memory corruption, potentially resulting in information disclosure or arbitrary code execution.
- References