CVE-2026-0719 – Libsoup: libsoup: arbitrary code execution via stack-based buffer overflow in ntlm authentication

CVE ID : CVE-2026-0719

Published : Jan. 8, 2026, 1:15 p.m. | 1 hour, 12 minutes ago

Description : A flaw was found in libsoup’s NTLM (NT LAN Manager) authentication module. When NTLM authentication is enabled, a local attacker can exploit a stack-based buffer overflow vulnerability in the md4sum() function. This allows the attacker to overwrite adjacent memory, which may result in arbitrary code execution with the privileges of the affected application.

Severity: 7.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…