CVE-2025-12105: Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.
Other sources
A Heap Use-After-Free vulnerability was found in the queue item management logic of the libsoup HTTP client library. The flaw occurs when a queued message is “finished” twice under specific timing conditions during asynchronous read operations. When the rununtilreaddone() function attempts to finalize an already-finished item, memory previously freed is accessed again, resulting in undefined behavior or a crash. This condition can be triggered remotely via crafted HTTP/2 request sequences or abrupt connection terminations. Exploitation does not require authentication or user interaction, and can lead to application crashes or denial of service in software using libsoup for network communications.
— Red Hat
Libsoup: heap use-after-free in libsoup message queue handling during http/2 read completion
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12105?
CVE-2025-12105 is classified as a medium-severity vulnerability due to the potential for denial of service conditions.
How do I fix CVE-2025-12105?
To fix CVE-2025-12105, update the libsoup library to the latest version provided by your operating system.
What causes the vulnerability CVE-2025-12105?
CVE-2025-12105 is caused by a flaw in the asynchronous message queue handling during aborted network operations.
Which applications are affected by CVE-2025-12105?
CVE-2025-12105 affects applications using the libsoup library for managing HTTP/2 communications, particularly those based on GNOME and WebKit.
Is CVE-2025-12105 an easy vulnerability to exploit?
CVE-2025-12105 does not require sophisticated techniques to exploit, but the impact depends on the specific application behavior.