CVE-2025-12105: A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2…

high7.5CVSS 3.1

AVNACLPRNUINSUCNINAH

A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
debian	libsoup2.4	< libsoup3 3.6.5-6 (forky)	libsoup3 3.6.5-6 (forky)
debian	libsoup3	< libsoup3 3.6.5-6 (forky)	libsoup3 3.6.5-6 (forky)
gnome	libsoup	<= 3.6.5	—
msrc	azl3_libsoup_3.4.4-10_on_azure_linux_3.0	—	—

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

osv7.5HIGH