Description
A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.
References10
- access.redhat.com/errata/RHSA-2025:21657
- access.redhat.com/errata/RHSA-2025:4439
- access.redhat.com/errata/RHSA-2025:4440
- access.redhat.com/errata/RHSA-2025:4508
- access.redhat.com/errata/RHSA-2025:4538
- access.redhat.com/errata/RHSA-2025:4560
- access.redhat.com/errata/RHSA-2025:4568
- access.redhat.com/errata/RHSA-2025:4609
- access.redhat.com/errata/RHSA-2025:4624
- access.redhat.com/errata/RHSA-2025:7436
Metrics
- CVSS 3.1
-
9.0
CRITICAL
Score source: CNA
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS — exploit probability
- 1% percentile: 62 · as of 7 November 2026
- CWE
- CWE-590
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.