CVE-2025-46420 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c

Vulnerability Details

Basic Information

Title CVE-2025-46420 Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.c
Type cvelist
Published 2025-04-24T12:58:01
Last Seen 2025-04-24T13:30:43
CVSS Score 6.5 (MEDIUM)

CVSS v3 Details

Attack Vector NETWORK
Attack Complexity LOW
Privileges Required NONE
User Interaction REQUIRED
Scope UNCHANGED
Confidentiality Impact NONE
Integrity Impact NONE
Availability Impact HIGH

CVE Information

CVE IDs CVE-2025-46420
CWE CWE-401
Bulletin Family cve

Description

A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.

Impact Assessment

Base Score 6.5
Severity MEDIUM

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.