一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月26日

CVE-2025-14181 [MEDIUM] – The SOAP HTTP client guards its response buffer growth with a check that relies on signed

未分类
📑 文章目录

The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger. When the check is optimised away, a malicious SOAP server can make the client allocate a buffer far smaller than the data it then writes into it, producing a heap buffer overflow.