Description
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Affected products
gnome: libsoup; redhat: codeready linux builder; redhat: codeready linux builder for arm64; redhat: codeready linux builder for arm64 eus; redhat: codeready linux builder for ibm z systems; redhat: codeready linux builder for ibm z systems eus; redhat: codeready linux builder for power little endian; redhat: codeready linux builder for power little endian eus; redhat: enterprise linux; redhat: enterprise linux eus; redhat: enterprise linux for arm 64; redhat: enterprise linux for arm 64 eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power little endian
References10
- gitlab.gnome.org/GNOME/libsoup/-/issues/422 ExploitIssue Tracking
- gitlab.gnome.org/GNOME/libsoup/-/issues/422 ExploitIssue Tracking
- access.redhat.com/errata/RHSA-2025:21657
- access.redhat.com/errata/RHSA-2025:7505 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8126 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8132 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8139 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8140 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8252 Third Party Advisory
- access.redhat.com/errata/RHSA-2025:8480 Third Party Advisory
Metrics
- CVSS 3.1
-
6.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - EPSS — exploit probability
- 1% percentile: 59 · as of 7 November 2026
- CWE
- CWE-125
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.