CVE-2026-12549
Medium · 4.8CVSS
4.8
EPSS
0.4%
Published
Jun 22, 2026
CISA due date
—
The record
The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a general signed comparison. When a client sends a Range request with a suffix length exceeding the content size, the resulting negative start value is not properly clamped, leading to malformed HTTP 206 responses and log flooding.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-6695 A flaw was found in GIMP. CWE-805
- CVE-2026-53877 An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. CWE-805
- CVE-2026-1767 A flaw was found in the GNOME localsearch (previously known as tracker-miners) MP3… CWE-805
- CVE-2026-1766 A flaw was found in GNOME localsearch (previously known as tracker-miners) MP3 Extractor… CWE-805
- CVE-2026-12087 Socket versions before 2.041 for Perl have an out-of-bounds heap read. CWE-805
- CVE-2026-34002 A flaw was found in the X.Org X server. CWE-805
- CVE-2025-63547 An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a… CWE-805
- CVE-2026-41035 In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a… CWE-805