ByteOS Network

NVD Vulnerability Details :

CVE-2024-52531

Modified

Source-cve@mitre.org

Published At-11 Nov, 2024 | 20:15

Updated At-03 Nov, 2025 | 23:17

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Secondary	3.1	8.4	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Type: Secondary

Version: 3.1

Base score: 8.4

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

The GNOME Project

>>libsoup>>Versions before 3.6.1(exclusive)

cpe:2.3:a:gnome:libsoup:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Secondary	cve@mitre.org

CWE ID: CWE-787

Type: Secondary

Source: cve@mitre.org

References

Hyperlink	Source	Resource
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407	cve@mitre.org	Issue Tracking
https://gitlab.gnome.org/GNOME/libsoup/-/merge_requests/407#note_2316401	cve@mitre.org	Issue Tracking
https://gitlab.gnome.org/Teams/Releng/security/-/wikis/home	cve@mitre.org	Vendor Advisory
https://offsec.almond.consulting/using-aflplusplus-on-bug-bounty-programs-an-example-with-gnome-libsoup.html	cve@mitre.org	Exploit Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/12/msg00014.html	af854a3a-2127-422b-91ae-364da2661108	N/A