CVE-2025-46420

MEDIUM

Libsoup - Memory Corruption

Title source: llm

Description

A flaw was found in libsoup. It is vulnerable to memory leaks in the soup_header_parse_quality_list() function when parsing a quality list that contains elements with all zeroes.

References (12)

[Issue Tracking] https://gitlab.gnome.org/GNOME/libsoup/-/issues/438

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:4439

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:4440

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:4508

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:4538

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:4560

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:4568

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:4609

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:4624

[Vendor Advisory] https://access.redhat.com/errata/RHSA-2025:7436

[Vendor Advisory] https://access.redhat.com/security/cve/CVE-2025-46420

[Issue Tracking] https://bugzilla.redhat.com/show_bug.cgi?id=2361963

Scores

CVSS v3 6.5

EPSS 0.0110

EPSS Percentile 77.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status draft

Timeline

Published Apr 24, 2025

Tracked Since Feb 18, 2026