CVE-2024-52531
PoC —CVSS 3.1
6.5 medium
EPSS
<1%p51
Published
()
Modified
Description
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).
- Vendors
- gnome
- Products
- libsoup
- Weakness
- CWE-787
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
In the news0 stories
No ingested article mentions this CVE yet.