CyberRota Analysis
AI-GeneratedA vulnerability exists in libsoup that affects clients handling HTTP/2 requests from non-pollable input streams, allowing a malicious server to manipulate the flow-control window. This can lead to excessive data being copied into a smaller buffer without proper bounds checking, potentially causing process termination or HTTP/2 session failures. Organizations utilizing libsoup in their applications should prioritize addressing this issue to mitigate the risk of service disruption.
Original NVD Description
A flaw was found in libsoup. When a client sends an HTTP/2 request body from a non-pollable input stream, the library can buffer more data than the current flow-control window later allows. A malicious HTTP/2 server can shrink SETTINGS_INITIAL_WINDOW_SIZE while that buffered read is still in progress. The client then copies the full buffer into a smaller DATA callback without a runtime bounds check, which can abort the process or fail the HTTP/2 session.