ZeroDay Findings
Sign inSign up

Findings

CVE-2026-102555

A flaw was found in libsoup.

Published Sep 29, 2026 · updated Oct 15, 2026 · gnome libsoup

A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when processing a crafted data URI.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 29, 2026 · NIST NVD

    Detected

    A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when

  2. Oct 15, 2026 · NIST NVD

    Updated

    A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uninitialized and be used as the size of the returned GBytes. This can lead to an out-of-bounds read or application crash when

Affected

  • cpe gnome/libsoupversion unspecified
  • cpe redhat/enterprise linux10.0
  • cpe redhat/enterprise linux9.0

Sources

  • CVE.orgVulnerability recordCVE-2026-102555

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-102555

    30-day exploitation probability 0.3%

    first.org
  • NIST NVDVulnerability recordCVE-2026-102555

    A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when calling g_base64_decode_inplace(). If the percent-decoded payload contained embedded NUL bytes, the decoded length could remain uniniti

    nvd.nist.gov

References