6.5
Medium
CVE-2024-52531 GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in…
Description
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libsoup 3.6 | earliest → < 3.6.1 | 3.6.1 |
References
- gitlab.gnome.org gitlab.gnome.org
- gitlab.gnome.org gitlab.gnome.org
- gitlab.gnome.org gitlab.gnome.org
- offsec.almond.consulting offsec.almond.consulting
Timeline
- Published
- Last modified
Other CVEs of libsoup
The 5 CVEs of libsoup →
CVE-2025-12105
Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
7.5
High
CVE-2024-52530
GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of…
7.5
High
CVE-2024-52532
GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption
7.5
High
CVE-2017-2885
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58
9.8
Critical