Bug 2367552 (CVE-2025-4969) - CVE-2025-4969 libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in soup-multipart.c
Summary: CVE-2025-4969 libsoup: Off-by-One Out-of-Bounds Read in find_boundary() in so...
Keywords:
Status: NEW
Alias: CVE-2025-4969
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2367553 2367554 2367555 2367556 2367557 2367558
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-05-20 16:27 UTC by OSIDB Bzimport
Modified: 2025-05-20 17:56 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2025-05-20 16:27:11 UTC
In libsoup's soup-form.c, the function find_boundary() is vulnerable to a buffer under-read issue when the function attempts to locate the boundary in a multipart form. If a malicious client submits a malformed multipart body, the function will attempt to read out of bonds.


Note You need to log in before you can comment on or make changes to this bug.