Back to Database
Status published
Medium
CVE-2024-52531
GNOME libsoup before 3.6.1 allows a buffer overflow in applications...
Vulnerability Description
GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-52531
Credits & Attribution
No credits recorded in the NVD database.
References
- https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home
- https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407
- https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407#note_2316401
- https://offsec.almond.consulting/using-aflplusplus-on-bug-bounty-programs-an-example-with-gnome-libsoup.html
More from GNOME
View All →CVE-2025-7425
Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr
High
7.8
CVE-2025-7424
Libxslt: type confusion in xmlnode.psvi between stylesheet and source nodes
High
7.5
CVE-2025-49795
Libxml: null pointer dereference leads to denial of service (dos)
High
7.5
CVE-2025-14512
Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow
Medium
6.5
CVE-2025-14087
Glib: glib: buffer underflow in gvariant parser leads to heap corruption
Medium
5.6
Affected Vendor
GNOME
View all reports →Affected Software
libsoup
Vulnerable Versions:
0
Timeline
Official Publish:
November 11th, 2024
Last Modified:
November 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L