libsoup Multipart HTTP Message Handling Vulnerability Leading to Out-of-Bounds Read

A vulnerability exists in the libsoup package due to improper verification of multipart HTTP message termination. This flaw allows remote attackers to send specially crafted multipart HTTP bodies, causing servers that use libsoup to read beyond their allocated memory limits, resulting in an out-of-bounds read.

Impact

Exploitation of this vulnerability causes an off-by-one out-of-bounds read, which can potentially lead to memory corruption or information disclosure.

Reproduction

The vulnerability can be reproduced by sending a malformed multipart HTTP message to a server that uses libsoup for handling HTTP requests. The libsoup version must be one that contains this vulnerability, and the server should be configured to process multipart messages.