CVE-2025-46420

A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.

A moderate impact memory leak flaw was found in libsoup. When the soup_header_parse_quality_list() function in soup-headers.c parses a quality list in which any element's quality value consists entirely of zeroes (for example q=0, q=0.0, or q=0.000), the parsed elements are not freed and memory is leaked in proportion to the size of the crafted values, which may carry a large number of trailing zeroes. A remote attacker able to have an application using libsoup parse such crafted HTTP quality-list headers could trigger this leak repeatedly, eventually exhausting available memory and causing a denial of service. The affected libsoup packages ship in Red Hat Enterprise Linux 8 and Red Hat Enterprise Linux 9, where fixes have been delivered through the respective update streams, and in Red Hat In-Vehicle OS, where the fix is being pursued through the platform's update process. Red Hat Enterprise Linux 10 ships libsoup3, which does not contain the vulnerable code and is therefore not affected. The Red Hat severity rating (Moderate, CVSS 6.5) is consistent with the upstream rating.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Currently, no mitigation is available for this vulnerability.