Back to the CVE list
CVE-2025-2784

Out-of-bounds read in Gnome Libsoup

CVSS score

6.5

EPSS probability

%0.9

Risk score

0.1

Published

1 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands (CVE-2025-27840). Uses ESP-IDF v5.0.8 and v5.0.9.

Public PoCSource updated: 05.08.2026 03:40:38

A Work-In-Progress for CVE-2025-27840

Public PoCSource updated: 08.04.2025 14:30:09

Bitcoin Cryptanalysis: CVE-2025-27840 Vulnerability in ESP32 Microcontrollers Puts Billions of IoT Devices at Risk via Wi-Fi & Bluetooth

Public PoCSource updated: 29.06.2026 03:35:44

Expanded version of the code shown at RootedCON redone in python - CVE-2025-27840

Public PoCSource updated: 12.05.2026 10:06:15

https://gitlab.gnome.org/GNOME/libsoup/-/issues/422

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-2784"