PT-2025-22020 · Libsoup+10 · Libsoup+10
Fouzhe
+1
·
Published
2025-05-19
·
Updated
2026-05-15
·
CVE-2025-4948
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
libsoup (affected versions not specified)
Description:
A flaw was found in the
soup multipart new from message() function of the libsoup HTTP library. The issue occurs when the library processes specially crafted multipart messages, leading to improper validation and an internal calculation error, which can cause an integer underflow. This can result in the program accessing invalid memory and crashing, creating a denial-of-service risk.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Integer Underflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu
Libsoup