CVE-2025-8197

Description

A global buffer overflow vulnerability was found in the soup_header_name_to_string function in Libsoup. The `soup_header_name_to_string` function does not validate the `name` parameter passed in, and directly accesses `soup_header_name_strings[name]`. The value of `name` is controllable, when `name` exceeds the index range of `soup_headr_name_string`, it will cause an out-of-bounds access.

Reserved 2025-07-25 | Published 2025-07-25 | Updated 2025-07-25 | Assigner redhat

Problem types

Out-of-bounds Write

Product status

Default status
affected

Default status
unknown

Default status
unknown

Default status
affected

Default status
affected

Timeline

2025-07-25:	Reported to Red Hat.
2025-07-25:	Made public.

Credits

Red Hat would like to thank Huang Zikang (XingTu Team of Legendsec) and Ying Lingyun (XingTu Team of Legendsec) for reporting this issue.

References

access.redhat.com/security/cve/CVE-2025-8197 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2383525 (RHBZ#2383525) issue-tracking

cve.org (CVE-2025-8197)

nvd.nist.gov (CVE-2025-8197)

Download JSON