libsoup prior to version 3.6.3 is vulnerable to a memory leak in the soup_header_parse_quality_list() function when parsing a quality list if any element contains all zeroes, i.e. q=0.0 , q=0.00 , q=0.000, and so forth.