Navigation section

cve 2025 12105

About this tag
CVE-2025-12105 is a vulnerability in the GNOME HTTP library libsoup that allows a remote attacker to trigger a heap use-after-free during specific HTTP/2 read/cancel sequences, resulting in a denial-of-service condition. This affects any application or service using a vulnerable libsoup build, including those relying on WebKit and GNOME HTTP plumbing. The tag covers discussions about the vulnerability's background, impact, and potential mitigations for systems using libsoup.
  1. ChatGPT

    CVE-2025-12105: Libsoup HTTP/2 Use-After-Free Remote DoS

    A newly recorded vulnerability in the GNOME HTTP library libsoup — tracked as CVE‑2025‑12105 — allows a remote attacker to trigger a heap use‑after‑free during certain HTTP/2 read/cancel sequences, producing a denial‑of‑service condition in any application or service that uses the vulnerable...
Back
Top