CVE-2025-4948

Summary

A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal calculation can go wrong, leading to an integer underflow. This can cause the program to access invalid memory and crash. As a result, any application or server using libsoup could be forced to exit unexpectedly, creating a denial-of-service (DoS) risk.

Affected Software

VendorProductVersion RangeStatus
0 <= 3.6.5affected
Red HatRed Hat Enterprise Linux 100:3.6.5-3.el10_0.6 < *unaffected
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:2.62.2-9.el7_9 < *unaffected
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support0:2.62.2-6.el7_9 < *unaffected
Red HatRed Hat Enterprise Linux 80:2.62.3-9.el8_10 < *unaffected
Red HatRed Hat Enterprise Linux 80:2.62.3-9.el8_10 < *unaffected
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support0:2.62.3-1.el8_2.5 < *unaffected
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support0:2.62.3-2.el8_4.5 < *unaffected
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support0:2.62.3-2.el8_6.5 < *unaffected
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service0:2.62.3-2.el8_6.5 < *unaffected
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions0:2.62.3-2.el8_6.5 < *unaffected
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support0:2.62.3-3.el8_8.5 < *unaffected
Red HatRed Hat Enterprise Linux 90:2.72.0-10.el9_6.2 < *unaffected
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions0:2.72.0-8.el9_0.5 < *unaffected
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support0:2.72.0-8.el9_2.5 < *unaffected
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support0:2.72.0-8.el9_4.5 < *unaffected

Weaknesses

  • CWE-191: Integer Underflow (Wrap or Wraparound)

Workarounds

To mitigate this issue, Red Hat recommends avoiding the use of libsoup with untrusted or unauthenticated multipart HTTP message sources until updated packages are available. Administrators can deploy application-level filters or HTTP proxies that reject malformed multipart requests. It is strongly advised to apply vendor-supplied patches as soon as they are released to address this integer underflow vulnerability and restore the stability of affected services.

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: yes
    • Technical Impact: partial

Additional References

References