CVE-2025-2784

CVE-2025-2784 affects the libsoup library (GNOME HTTP client/server). A heap buffer over-read/over-run vulnerability is reported in the content sniffing path, notably in skip_insignificant_space (and related sniffing functions), allowing an out-of-bounds read on crafted responses. Connected advis...

CVE-2024-52531

GNOME libsoup versions prior to 3.6.1 are vulnerable to a buffer overflow during UTF-8 conversion within the soup_header_parse_param_list_strict function. This flaw can be triggered remotely via soup_message_headers_get_content_type when an application attempts to retrieve the content type of a r...

CVE-2024-52532

The GNOME libsoup library, specifically versions prior to 3.6.1 , is vulnerable to an infinite loop and high memory consumption during the processing of specific WebSocket data patterns from clients. This flaw, categorized under CWE-835 , can be exploited remotely to cause a denial of service (Do...

CVE-2018-11713

CVE-2018-11713 concerns WebKitGTK's WebKit Libsoup network backend. WebCore/SocketStreamHandleImplSoup.cpp could fail to use system proxy settings for WebSocket connections in WebKitGTK+ builds prior to 2.20.0 or when libsoup 2.62.0 is not present. This could allow a crafted web page to deanonymi...

CVE-2024-52530

Versions of GNOME libsoup prior to 3.6.0 are vulnerable to HTTP request smuggling in certain configurations. The root cause is that the library ignores '' (null) characters at the end of header names; for example, a header named Transfer-Encoding is treated identically to Transfer-Encoding. This ...