CVE-2025-14181

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description The SOAP HTTP client contains a flaw in how it manages response buffer growth. The system uses a check based on signed integer overflow, which is considered undefined behavior and may be optimized away by the compiler. This allows a malicious SOAP server to force the client to allocate a buffer significantly smaller than the actual data being written, resulting in a heap buffer overflow. A heap buffer overflow occurs when data is written beyond the boundaries of a memory block allocated on the heap, potentially leading to crashes or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.