What is CVE-2026-77014?

CVE-2026-77014 is a medium-severity vulnerability in Red Hat Enterprise Linux 10, classified under CWE-197. CVSS score: 5.3/10. Published 2026-08-20.

How severe is CVE-2026-77014?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Red Hat Enterprise Linux 10

CVE-2026-77014

A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INT_MAX. This causes silent omission of requested byte ranges from HTTP 206 Partial Content responses on resources larger than approximately 2 GB.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Weakness classification (CWE)

CWE-197

References

secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking)
secalert@redhat.com

Frequently asked questions

What is CVE-2026-77014?: CVE-2026-77014 is a medium-severity vulnerability in Red Hat Enterprise Linux 10, classified under CWE-197. CVSS score: 5.3/10. Published 2026-08-20.
How severe is CVE-2026-77014?: Medium severity. CVSS v3 base score is 5.3 out of 10.