CVE-2025-2784 Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
A heap buffer over-read in libsoup allows attackers to cause crashes or leak memory via crafted HTTP responses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-2784?
CVE-2025-2784 is a high-severity memory corruption vulnerability in Redhat Enterprise Linux, published on 3 Apr 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Weakness: CWE-125
Which versions are affected by CVE-2025-2784?
It affects 21 products.
Products include Gnome Libsoup, Redhat Codeready Linux Builder, Redhat Codeready Linux Builder for Arm64, Redhat Codeready Linux Builder for Arm64 Eus, Redhat Codeready Linux Builder for Ibm Z Systems, Redhat Codeready Linux Builder for Ibm Z Systems Eus and 15 more.
How do I fix CVE-2025-2784?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-2784 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-2784 exists.
Other vulnerabilities in Redhat Enterprise Linux
- CVE-2026-102556 Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion
- CVE-2026-102557 Libsoup: libsoup: heap buffer overflow during websocket message reassembly
- CVE-2026-102558 Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth
- CVE-2026-102559 Libsoup: libsoup: heap buffer overflow during websocket client-frame masking
- CVE-2026-102560 Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth
Sources
Also known as AZL-59535, AZL-59544, DEBIAN-CVE-2025-2784, GHSA-5qxx-2mqf-3v7g, JLSEC-2026-1280, UBUNTU-CVE-2025-2784.