Acknowledged
Created: May 22, 2025
Updated: Jun 20, 2025
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace
A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries (out-of-bounds read).
CREATE(Triage):(User=admin) CVE-2025-4969 (https://nvd.nist.gov/vuln/detail/CVE-2025-4969)
