Threats Tagged 'ghsa-vfxx-hcqj-vrh4'

A heap buffer overflow vulnerability exists in libsoup's soup_uri_decode_data_uri() function in Red Hat Enterprise Linux 10. The function incorrectly handles base64 data-URI payloads containing embedded NUL bytes, leading to an uninitialized decoded length. This flaw can cause an out-of-bounds read or application crash when processing crafted data URIs. Red Hat has released an important security update addressing this issue in libsoup3.