CVE-2025-4969

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-4969
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-4969.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-4969
Downstream
Related
Published
2025-05-21T06:16:28Z
Modified
2025-08-09T19:01:27Z
Summary
[none]
Details

A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries (out-of-bounds read).

References

Affected packages