CVE-2025-2784 HIGH

CVE-2025-2784: Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Vendor Red Hat
Product Red Hat Enterprise Linux 6
Weakness CWE-125
Published April 3, 2025
Last update November 18, 2025
View on NVD All CVEs

CVSS base score

7.0/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

What the vulnerability does

01Description

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.

Key dates

02Disclosure timeline

April 3, 2025 CVE published
November 18, 2025 Record updated