CVE-2025-32914CWE-125
Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process
High · published April 14, 2025
What it is
A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.
The record
Technical detail
- CVSS v3.1
- 7.4 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00771 · 55.2th percentile
- Weakness
- CWE-125 · Out-of-bounds Read
- Published
- 2025-04-14T14:45Z
EPSS history
Timeline