CVE-2025-4969 is a medium severity vulnerability in the libsoup package caused by improper verification of multipart HTTP message termination. This flaw allows a remote attacker to send a specially crafted multipart HTTP body that triggers an out-of-bounds read beyond allocated memory boundaries. The flaw results in reading one byte beyond the buffer per attack, making exploitation for meaningful data leakage difficult.