libsoup
22 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-11021 | ≤ 3.6.5 | Libsoup: out-of-bounds read in cookie date handling of libsoup http library | HIGH 7.5 | 0.6 % | ||
| CVE-2025-4969 | ≤ 3.6.5 | Libsoup: off-by-one out-of-bounds read in find_boundary() in soup-multipart.c | MEDIUM 6.5 | 0.9 % | ||
| CVE-2025-4945 | ≤ 3.6.5 | Libsoup: integer overflow in cookie expiration date handling in libsoup | LOW 3.7 | 0.7 % | ||
| CVE-2025-4948 | ≤ 3.6.5 | Libsoup: integer underflow in soup_multipart_new_from_message() leading to denial of service in libsoup | HIGH 7.5 | 0.8 % | ||
| CVE-2025-4476 | < 3.6.6 | Libsoup: null pointer dereference in libsoup may lead to denial of service | MEDIUM 4.3 | 0.4 % | ||
| CVE-2025-46421 | < 3.6.5 | Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server | MEDIUM 6.8 | 0.6 % | ||
| CVE-2025-46420 | < 3.6.3 | Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c | MEDIUM 6.5 | 0.6 % | ||
| CVE-2025-32911 | < 3.6.3 | Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value | CRITICAL 9.0 | 1.0 % | ||
| CVE-2025-32914 | < 3.6.5 | Libsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of process | HIGH 7.4 | 0.8 % | ||
| CVE-2025-32912 | < 3.6.5 | Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication | MEDIUM 6.5 | 0.5 % | ||
| CVE-2025-32910 | < 3.6.3 | Libsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server o… | MEDIUM 6.5 | 0.5 % | ||
| CVE-2025-32909 | < 3.6.2 | Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c | MEDIUM 5.3 | 0.5 % | ||
| CVE-2025-32908 | < 3.6.5 | Libsoup: denial of service on libsoup through http/2 server | HIGH 7.5 | 0.6 % | ||
| CVE-2025-32907 | < 3.6.5 | Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header | MEDIUM 5.3 | 0.7 % | ||
| CVE-2025-32906 | < 3.6.5 | Libsoup: out of bounds reads in soup_headers_parse_request() | HIGH 7.5 | 1.0 % | ||
| CVE-2025-32913 | < 3.6.2 | Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no valu… | HIGH 7.5 | 0.8 % | ||
| CVE-2025-32053 | < 3.6.1 | Libsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() | MEDIUM 6.5 | 0.7 % | ||
| CVE-2025-32052 | < 3.6.1 | Libsoup: heap buffer overflow in sniff_unknown() | MEDIUM 6.5 | 0.7 % | ||
| CVE-2025-32051 | < 3.6.1 | Libsoup: segmentation fault when parsing malformed data uri | MEDIUM 5.9 | 0.6 % | ||
| CVE-2025-32050 | < 3.6.1 | Libsoup: integer overflow in append_param_quoted | MEDIUM 5.9 | 0.8 % | ||
| CVE-2025-32049 | ≤ 3.6.4 | Libsoup: denial of service attack to websocket server | HIGH 7.5 | 0.9 % | ||
| CVE-2025-2784 | < 3.6.5 | Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content | HIGH 7.0 | 0.9 % |