Wind River Support Network

HomeDefectsLIN1024-9446

Acknowledged

LIN1024-9446 : Security Advisory - libsoup&libsoup-2.4 - CVE-2025-4969

Created: May 22, 2025 Updated: Jul 4, 2025

Found In Version: 10.24.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Userspace

Description

A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination of multipart HTTP messages. This can allow a remote attacker to send a specially crafted multipart HTTP body, causing the libsoup-consuming server to read beyond its allocated memory boundaries (out-of-bounds read).

CREATE(Triage):(User=admin) CVE-2025-4969 (https://nvd.nist.gov/vuln/detail/CVE-2025-4969)