GNOME libsoup
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-12105 | ≤ 3.6.5 | Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion | HIGH 7.5 | 0.5 % | ||
| CVE-2024-52531 | < 3.6.1 | GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. | HIGH 8.4 | 0.7 % | ||
| CVE-2017-2885 | 2.58 | An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP request can cause a stac | CRITICAL 9.8 | 23 % |