CyberRota Analysis
AI-GeneratedA vulnerability in libsoup allows for an unsigned integer underflow in the soup_filter_input_stream_read_until() function, leading to a heap buffer over-read when processing multipart HTTP responses. This can be exploited by a malicious HTTP server to crash client applications or potentially expose sensitive heap memory. Organizations using libsoup in their applications should prioritize addressing this issue to mitigate risks associated with data exposure and application stability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_read_until() function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client application to crash or disclose sensitive heap memory.