CVE Catalog

CVE-2025-46420

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.49%

38th percentile - higher than 38% of all known CVEs

Summary

A flaw was found in the libsoup library causing memory leaks in the soup_header_parse_quality_list() function when parsing a quality list containing elements with all zeroes.

Risk Assessment

Memory leaks can lead to exhaustion of system resources, resulting in denial of service (DoS) for applications using libsoup.

Recommendation

It is recommended to immediately update the libsoup library to a version containing the fix for this vulnerability.

Original NVD description (English source)

A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS