cve 2025 2784

CVE-2025-2784 is a heap buffer over-read vulnerability in the libsoup content sniffer, specifically in the function that skips insignificant whitespace while determining content type. This one-byte out-of-bounds read can be triggered by a crafted HTTP response from a server. The vulnerability affects Linux distributions and GNOME-based stacks, prompting a widespread emergency patching wave. Users should apply patches from their distribution or update libsoup to the fixed version to mitigate the risk.