Heap Buffer Over-read in Libsoup Affects Multiple Clients
CVE-2025-2784
7HIGH
Summary
A flaw exists in the Libsoup library, which is responsible for handling HTTP requests and responses. This vulnerability allows for a heap buffer over-read in the skip_insight_whitespace() function. When Libsoup clients process crafted HTTP responses from a malicious server, they may inadvertently read data beyond the allocated buffer. This could potentially expose sensitive information or result in unexpected behavior, highlighting the importance of patching and securing applications that utilize Libsoup.
References
CVSS V3.1
Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved