vulnerability

Huawei EulerOS: CVE-2025-4969: libsoup security update

Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:P)
Published
Jul 18, 2025
Added
Sep 15, 2025
Modified
Sep 15, 2025

Description

A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries (out-of-bounds read).

Solutions

huawei-euleros-2_0_sp10-upgrade-libsouphuawei-euleros-2_0_sp10-upgrade-libsoup-help
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.