The libsoup HTTP library contains an out-of-bounds memory read vulnerability that could allow unauthenticated attackers to disclose sensitive information from memory.

This vulnerability is an out-of-bounds read (CWE-125) triggered by the improper parsing of cookie expiration dates. An unauthenticated attacker can exploit this by sending a specially crafted HTTP response to a client or application utilizing the library, leading to the potential leakage of sensitive memory contents.

The exploitation of this vulnerability poses a significant risk to data confidentiality. Because libsoup is widely integrated into various desktop and web-based applications, successful memory disclosure could expose authentication tokens, session identifiers, or other private data stored within the application process. Given the CVSS score of 7.5, this high-severity flaw requires prompt attention to prevent unauthorized access to sensitive information.

Immediate Action: Update the libsoup library to the fixed versions provided by your distribution vendor, specifically noting the patches released by Red Hat for RHEL 7, 8, and 10.

Proactive Monitoring: Monitor system logs for unusual application crashes or memory access errors that may indicate an attempt to trigger an out-of-bounds read condition.

Compensating Controls: While specific network-level blocking is difficult, ensure that endpoints are protected by robust endpoint security solutions that monitor for abnormal process memory access patterns.

Public Exploit Available: Yes, a public proof-of-concept exists in the referenced GitHub repository.

This vulnerability represents a significant risk to applications relying on libsoup for network communication. Security teams should prioritize the application of vendor-supplied security updates across all affected systems. Failure to patch may expose sensitive process memory to remote attackers, and immediate remediation is strongly advised to maintain the confidentiality of application data.