PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2025-2784

CVE-2025-2784

libsoup: Heap buffer over-read in `skip_insignificant_space` when sniffing content

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · March 25, 2025

Updated · November 1, 2026

Description

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

Statement

Red Hat rates this with a Moderate impact as the flaw may be targeting Confidentiality and Integrity specific to each request.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Currently no mitigation is available for this vulnerability.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

CWE-125 · Out-of-bounds Read