A heap out-of-bounds read flaw exists in the libsoup library when processing multipart HTTP messages. An integer truncation between the caller and the internal soup_headers_parse() function can reduce the reported length, causing an over-read of the heap buffer. This over-read can either crash the application or expose sensitive data residing in the heap, as described in the CVE report. The weakness is classified as CWE-125.

Red Hat Enterprise Linux 10 is the only affected system identified by the Red Hat CNA. The affected component is the libsoup runtime package bundled with that distribution. No other vendors, products, or versions are listed.

The CVSS score of 4.2 indicates moderate severity with primary impact of denial of service and secondary potential for information disclosure. The EPSS score is below 1%, suggesting low likelihood of exploitation in the wild, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is a remote, unauthenticated user sending a crafted multipart HTTP request to an application that uses libsoup; this inference is derived from the description stating the flaw occurs during multipart parsing. No authentication or privilege escalation is required.