CVE-2009-0585: Joe Shaw Libsoup

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation.

Affected products

• Joe Shaw Libsoup: version 2.1 only; version 2.23.1 only; version 2.23.6 only; version 2.23.91 only; version 2.23.92 only

Published 2009-03-14. Last modified 2026-06-16.