{"id":"CVE-2025-32909","aliases":["ALSA-2025:8292","AZL-60393","AZL-60411","DEBIAN-CVE-2025-32909","DLA-4140-1","EUVD-2025-10891","GHSA-wcmh-fj7m-gv6r","MGASA-2025-0261","OESA-2025-1460","RHSA-2025:8292","RLSA-2025:8292","SUSE-SU-2025:01504-1","SUSE-SU-2025:01794-1","SUSE-SU-2025:01801-1","SUSE-SU-2025:01802-1","SUSE-SU-2025:01864-1","SUSE-SU-2025:1504-1","SUSE-SU-2025:1510-1","SUSE-SU-2025:20375-1","SUSE-SU-2025:20446-1","UBUNTU-CVE-2025-32909","USN-7490-1","USN-7490-3","openSUSE-SU-2025:15189-1"],"status":"published","title":"Libsoup: null pointer dereference on libsoup through  function \"sniff_mp4\" in soup-content-sniffer.c","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0054,"percentile":0.45755,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2025-04-14T14:42:26Z","modified":"2026-11-06T01:21:25Z","fixes":[{"ecosystem":"Azure Linux:2","package":"libsoup","fixed_in":["3.0.4-7"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libsoup","fixed_in":["3.4.4-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsoup2.4","fixed_in":["2.74.3-10.1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libsoup3","fixed_in":["3.2.3-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsoup3","fixed_in":["3.6.4-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsoup2.4","fixed_in":["2.52.2-1ubuntu0.3+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsoup2.4","fixed_in":["2.62.1-1ubuntu0.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libsoup2.4","fixed_in":["2.70.0-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libsoup2.4","fixed_in":["2.74.2-3ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libsoup3","fixed_in":["3.0.7-0ubuntu1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libsoup2.4","fixed_in":["2.74.3-6ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libsoup3","fixed_in":["3.4.4-5ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw32-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw32-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw64-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mingw64-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Azure Linux:2","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74.3-1","2.74.3-1+deb12u1","2.74.3-10","2.74.3-10.1","2.74.3-11","2.74.3-2","2.74.3-3","2.74.3-3.1~exp1","2.74.3-3.1~exp2","2.74.3-3.1~exp3","2.74.3-5","2.74.3-6","2.74.3-7","2.74.3-8","2.74.3-8.1","2.74.3-9"]},{"source":"osv","ecosystem":"Debian:13","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-10.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.3-0+deb12u1"}]}],"versions":["3.2.2-2"]},{"source":"osv","ecosystem":"Debian:13","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.4-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.72.0-2+deb11u2"}]}],"versions":["2.72.0-2","2.72.0-2+deb11u1"],"bundled":11},{"source":"osv","ecosystem":"Mageia:9","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-1.2.mga9"}]}],"bundled":18},{"source":"osv","ecosystem":"Mageia:9","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-1.2.mga9"}]}],"bundled":18},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.71.0-6.oe2003sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-7.oe2203sp3"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-7.oe2203sp4"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-7.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-7.oe2403sp1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"spice-client-win-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"spice-client-win-x86","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw32-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-freetype-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"mingw64-freetype-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mingw-freetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8-3.el8_10.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Rocky Linux:8","package":"spice-client-win","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.10-1.el8_10"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-150600.3.7.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-5.15.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.2-5.15.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.68.4-150200.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-150600.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-150600.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-150600.4.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-150400.3.9.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-150600.3.7.1"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-150600.3.7.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-150400.3.7.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-6.1"}]}],"bundled":16},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libsoup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-slfo.1.1_3.1"}]}],"bundled":16},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.2-1ubuntu0.3+esm1"}]}],"versions":["2.50.0-2debian1","2.52.1-1","2.52.2-1","2.52.2-1ubuntu0.1","2.52.2-1ubuntu0.2","2.52.2-1ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.1-1ubuntu0.4+esm2"}]}],"versions":["2.60.1-1","2.60.2-1","2.60.2-2","2.60.3-1","2.61.90-1","2.62.0-1","2.62.1-1","2.62.1-1ubuntu0.1","2.62.1-1ubuntu0.3","2.62.1-1ubuntu0.4","2.62.1-1ubuntu0.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.70.0-1ubuntu0.3"}]}],"versions":["2.68.2-0ubuntu1","2.68.2-1","2.68.2-2","2.68.2-2build2","2.69.90-1","2.70.0-1","2.70.0-1ubuntu0.1","2.70.0-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-3ubuntu0.3"}]}],"versions":["2.72.0-3ubuntu3","2.74.1-1","2.74.2-2","2.74.2-3","2.74.2-3ubuntu0.1","2.74.2-3ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-0ubuntu1+esm3"}]}],"versions":["3.0.4-2","3.0.4-3","3.0.5-1","3.0.7-0ubuntu1","3.0.7-0ubuntu1+esm1","3.0.7-0ubuntu1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-6ubuntu1.3"}]}],"versions":["2.74.3-1","2.74.3-2","2.74.3-3","2.74.3-6","2.74.3-6build1","2.74.3-6ubuntu1","2.74.3-6ubuntu1.1","2.74.3-6ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-5ubuntu0.3"}]}],"versions":["3.4.2-4","3.4.4-1","3.4.4-2","3.4.4-4","3.4.4-5","3.4.4-5build1","3.4.4-5build2","3.4.4-5ubuntu0.1","3.4.4-5ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.52.2-1ubuntu0.3+esm1"}]}],"versions":["2.50.0-2debian1","2.52.1-1","2.52.2-1","2.52.2-1ubuntu0.1","2.52.2-1ubuntu0.2","2.52.2-1ubuntu0.3"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.62.1-1ubuntu0.4+esm2"}]}],"versions":["2.60.1-1","2.60.2-1","2.60.2-2","2.60.3-1","2.61.90-1","2.62.0-1","2.62.1-1","2.62.1-1ubuntu0.1","2.62.1-1ubuntu0.3","2.62.1-1ubuntu0.4","2.62.1-1ubuntu0.4+esm1"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.70.0-1ubuntu0.3"}]}],"versions":["2.68.2-0ubuntu1","2.68.2-1","2.68.2-2","2.68.2-2build2","2.69.90-1","2.70.0-1","2.70.0-1ubuntu0.1","2.70.0-1ubuntu0.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.2-3ubuntu0.3"}]}],"versions":["2.72.0-3ubuntu3","2.74.1-1","2.74.2-2","2.74.2-3","2.74.2-3ubuntu0.1","2.74.2-3ubuntu0.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup2.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-6ubuntu1.3"}]}],"versions":["2.74.3-1","2.74.3-2","2.74.3-3","2.74.3-6","2.74.3-6build1","2.74.3-6ubuntu1","2.74.3-6ubuntu1.1","2.74.3-6ubuntu1.2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.7-0ubuntu1+esm3"}]}],"versions":["3.0.4-2","3.0.4-3","3.0.5-1","3.0.7-0ubuntu1","3.0.7-0ubuntu1+esm1","3.0.7-0ubuntu1+esm2"],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsoup3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.4-5ubuntu0.3"}]}],"versions":["3.4.2-4","3.4.4-1","3.4.4-2","3.4.4-4","3.4.4-5","3.4.4-5build1","3.4.4-5build2","3.4.4-5ubuntu0.1","3.4.4-5ubuntu0.2"],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libsoup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.74.3-11.1"}]}],"bundled":7}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:8292","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32909","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359353","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/431","tags":["report","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00036.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32909","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-wcmh-fj7m-gv6r"},{"url":"https://access.redhat.com/security/cve/CVE-2025-27363","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32050","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32052","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32053","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32906","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32907","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32910","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32911","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-32913","tags":["report"]},{"url":"https://bugzilla.redhat.com/2351357","tags":["report"]},{"url":"https://bugzilla.redhat.com/2357067","tags":["report"]},{"url":"https://bugzilla.redhat.com/2357069","tags":["report"]},{"url":"https://bugzilla.redhat.com/2357070","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359341","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359342","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359353","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359354","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359355","tags":["report"]},{"url":"https://bugzilla.redhat.com/2359357","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-8292.html","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32909.json","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-32909","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0261.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34187","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7432-1","tags":["advisory"]},{"url":"https://openwall.com/lists/oss-security/2025/04/18/4","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/53THXHSDPP4TLMFRSP5DPLY4DK72M7XY/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-7543-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NK7USYFSJPRTIVISSEDBLS53JCM5ETOI/","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/EPLHUVQI4JICGWTVGG7KI7D4BMHB34YD/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32906","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32910","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32913","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359354","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359357","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8292.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27363","tags":["advisory"]},{"url":"https://www.facebook.com/security/advisories/cve-2025-27363","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32050","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/424","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32052","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/425","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32053","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/426","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32906","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/404","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32907","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32907","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/428","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32909","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32910","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/432","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32911","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/433","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-32913","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/libsoup/-/issues/435","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8292","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501504-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1240750","tags":["report"]},{"url":"https://bugzilla.suse.com/1240752","tags":["report"]},{"url":"https://bugzilla.suse.com/1240754","tags":["report"]},{"url":"https://bugzilla.suse.com/1240756","tags":["report"]},{"url":"https://bugzilla.suse.com/1240757","tags":["report"]},{"url":"https://bugzilla.suse.com/1241162","tags":["report"]},{"url":"https://bugzilla.suse.com/1241164","tags":["report"]},{"url":"https://bugzilla.suse.com/1241214","tags":["report"]},{"url":"https://bugzilla.suse.com/1241222","tags":["report"]},{"url":"https://bugzilla.suse.com/1241223","tags":["report"]},{"url":"https://bugzilla.suse.com/1241226","tags":["report"]},{"url":"https://bugzilla.suse.com/1241238","tags":["report"]},{"url":"https://bugzilla.suse.com/1241252","tags":["report"]},{"url":"https://bugzilla.suse.com/1241263","tags":["report"]},{"url":"https://bugzilla.suse.com/1241686","tags":["report"]},{"url":"https://bugzilla.suse.com/1241688","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32912","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32913","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-32914","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46421","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501794-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243332","tags":["report"]},{"url":"https://bugzilla.suse.com/1243423","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4969","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501801-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501802-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501864-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251504-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251510-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520375-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520446-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32909","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7490-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7490-3","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-32906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32910","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32911","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32912","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32913","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-32914","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-46420","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2025-46421","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LI34B57WJ4B5UMQTOCNXAAI3NVKDGJWF/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-32909","title":"Libsoup: null pointer dereference on libsoup through  function \"sniff_mp4\" in soup-content-sniffer.c","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","status":"published","published":"2025-04-14T14:42:26.433Z","modified":"2026-11-05T14:30:58.922Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-05T16:36:33.176634Z"}],"euvd":[{"id":"EUVD-2025-10891","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","status":"published","published":"2025-04-14T14:42:26Z","modified":"2026-11-05T14:30:58Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-05T16:59:57.067043Z"}],"ghsa":[{"id":"GHSA-wcmh-fj7m-gv6r","title":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference...","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","status":"published","published":"2025-04-14T15:31:59Z","modified":"2026-06-26T00:33:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:08:59.978633Z"}],"nvd":[{"id":"CVE-2025-32909","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","status":"published","published":"2025-04-14T15:15:25.14Z","modified":"2026-11-05T15:17:14.77Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-05T19:55:50.758755Z"}],"osv":[{"id":"CVE-2025-32909","title":"Libsoup: null pointer dereference on libsoup through  function \"sniff_mp4\" in soup-content-sniffer.c","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","status":"published","published":"2025-04-14T14:42:26.433Z","modified":"2026-11-07T07:05:05.429584764Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-07T03:07:56.270712Z"},{"id":"DEBIAN-CVE-2025-32909","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","status":"published","published":"2025-04-14T15:15:25.14Z","modified":"2026-10-31T16:02:18.772085698Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"OESA-2025-1460","title":"libsoup security update","description":"libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server.(CVE-2025-32906)\n\nA flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.(CVE-2025-32909)\n\nA flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash.(CVE-2025-32910)\n\nA flaw was found in libsoup, which is vulnerable to a use-after-free memory issue not on the heap in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.(CVE-2025-32911)\n\nA flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash.(CVE-2025-32912)\n\nA flaw was found in libsoup, where the soup_message_headers_get_content_disposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.(CVE-2025-32913)","status":"published","published":"2025-04-25T11:08:33Z","modified":"2026-08-18T01:18:50.526590793Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"RHSA-2025:8292","title":"Red Hat Security Advisory: mingw-freetype and spice-client-win security update","status":"published","published":"2025-05-29T10:03:34Z","modified":"2026-10-17T10:07:23Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2025:8292","title":"Important: mingw-freetype and spice-client-win security update","description":"MinGW Windows Freetype library.\n\nSecurity Fix(es):\n\n* freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)\n\n* libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)\n\n* libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)\n\n* libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)\n\n* libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)\n\n* libsoup: Denial of service in server when client requests a large amount of  overlapping ranges with Range header (CVE-2025-32907)\n\n* libsoup: NULL Pointer Dereference on libsoup through  function \"sniff_mp4\" in soup-content-sniffer.c (CVE-2025-32909)\n\n* libsoup: Null pointer deference on libsoup via  /auth/soup-auth-digest.c through \"soup_auth_digest_authenticate\" on  client when server omits the \"realm\" parameter in an Unauthorized  response with Digest authentication (CVE-2025-32910)\n\n* libsoup: Double free on  soup_message_headers_get_content_disposition() through  \"soup-message-headers.c\" via \"params\" GHashTable value (CVE-2025-32911)\n\n* libsoup: NULL pointer dereference in  soup_message_headers_get_content_disposition when \"filename\" parameter  is present, but has no value in Content-Disposition header (CVE-2025-32913)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:09.965894Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-32909","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","status":"published","published":"2025-04-14T15:15:00Z","modified":"2026-04-22T15:42:23.369943Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:28.829873Z"},{"id":"ALSA-2025:8292","title":"Important: mingw-freetype security update","description":"MinGW Windows Freetype library.  \n\nSecurity Fix(es):  \n\n  * freetype: OOB write when attempting to parse font subglyph structures related to TrueType GX and variable font files (CVE-2025-27363)\n  * libsoup: Integer overflow in append_param_quoted (CVE-2025-32050)\n  * libsoup: Heap buffer overflow in sniff_unknown() (CVE-2025-32052)\n  * libsoup: Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (CVE-2025-32053)\n  * libsoup: Out of bounds reads in soup_headers_parse_request() (CVE-2025-32906)\n  * libsoup: Denial of service in server when client requests a large amount of overlapping ranges with Range header (CVE-2025-32907)\n  * libsoup: NULL Pointer Dereference on libsoup through function \"sniff_mp4\" in soup-content-sniffer.c (CVE-2025-32909)\n  * libsoup: Null pointer deference on libsoup via /auth/soup-auth-digest.c through \"soup_auth_digest_authenticate\" on client when server omits the \"realm\" parameter in an Unauthorized response with Digest authentication (CVE-2025-32910)\n  * libsoup: Double free on soup_message_headers_get_content_disposition() through \"soup-message-headers.c\" via \"params\" GHashTable value (CVE-2025-32911)\n  * libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when \"filename\" parameter is present, but has no value in Content-Disposition header (CVE-2025-32913)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-29T00:00:00Z","modified":"2026-10-29T11:02:23.207476897Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"AZL-60393","title":"CVE-2025-32909 affecting package libsoup for versions less than 3.0.4-7","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","status":"published","published":"2025-04-14T15:15:25Z","modified":"2026-04-21T04:37:25.269965Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-60411","title":"CVE-2025-32909 affecting package libsoup for versions less than 3.4.4-4","description":"A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.","status":"published","published":"2025-04-14T15:15:25Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"DLA-4140-1","title":"libsoup2.4 - security update","status":"published","published":"2025-04-27T00:00:00Z","modified":"2026-03-09T01:22:57.502891Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2025-0261","title":"Updated libsoup3 \u0026 libsoup packages fix security vulnerabilities","description":"Libsoup: heap buffer over-read in `skip_insignificant_space` when\nsniffing content. (CVE-2025-2784)\nLibsoup: denial of service attack to websocket server. (CVE-2025-32049)\nLibsoup: integer overflow in append_param_quoted. (CVE-2025-32050)\nLibsoup: segmentation fault when parsing malformed data uri.\n(CVE-2025-32051)\nLibsoup: heap buffer overflow in sniff_unknown(). (CVE-2025-32052)\nLibsoup: heap buffer overflows in sniff_feed_or_html() and\nskip_insignificant_space(). (CVE-2025-32053)\nLibsoup: out of bounds reads in soup_headers_parse_request().\n(CVE-2025-32906)\nLibsoup: denial of service in server when client requests a large amount\nof overlapping ranges with range header. (CVE-2025-32907)\nLibsoup: denial of service on libsoup through http/2 server.\n(CVE-2025-32908)\nLibsoup: null pointer dereference on libsoup through function\n\"sniff_mp4\" in soup-content-sniffer.c. (CVE-2025-32909)\nLibsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c\nthrough \"soup_auth_digest_authenticate\" on client when server omits the\n\"realm\" parameter in an unauthorized response with digest\nauthentication. (CVE-2025-32910)\nLibsoup: double free on soup_message_headers_get_content_disposition()\nthrough \"soup-message-headers.c\" via \"params\" ghashtable value.\n(CVE-2025-32911)\nLibsoup: null pointer dereference in client when server omits the\n\"nonce\" parameter in an unauthorized response with digest\nauthentication. (CVE-2025-32912)\nLibsoup: null pointer dereference in\nsoup_message_headers_get_content_disposition when \"filename\" parameter\nis present, but has no value in content-disposition header.\n(CVE-2025-32913)\nLibsoup: oob read on libsoup through function\n\"soup_multipart_new_from_message\" in soup-multipart.c leads to crash or\nexit of process. (CVE-2025-32914)\nLibsoup: memory leak on soup_header_parse_quality_list() via\nsoup-headers.c. (CVE-2025-46420)\nLibsoup: information disclosure may leads libsoup client sends\nauthorization header to a different host when being redirected by a\nserver. (CVE-2025-46421)\nLibsoup: null pointer dereference in libsoup may lead to denial of\nservice. (CVE-2025-4476)\nLibsoup: integer overflow in cookie expiration date handling in libsoup.\n(CVE-2025-4945)\n","status":"published","published":"2025-11-05T22:49:51Z","modified":"2026-04-16T04:41:13.813289008Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15189-1","title":"libsoup-2_4-1-2.74.3-11.1 on GA media","description":"These are all security issues fixed in the libsoup-2_4-1-2.74.3-11.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-06-01T00:00:00Z","modified":"2026-03-23T04:53:28.089089Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01504-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing conten (bsc#1240750) \n - CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752) \n - CVE-2025-32051: Fixed segmentation fault when parsing malformed data URI (bsc#1240754)\n - CVE-2025-32052: Fixed heap buffer overflow in sniff_unknown() (bsc#1240756) \n - CVE-2025-32053: Fixed heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757) \n - CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n - CVE-2025-32907: Fixed excessive memory consumption in server when client requests a large amount of overlapping ranges in a single HTTP request (bsc#1241222) \n - CVE-2025-32908: Fixed HTTP request may lead to server crash due to HTTP/2 server not fully validating the values of pseudo-headers (bsc#1241223)\n - CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226)\n - CVE-2025-32910: Fixed NULL pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252)\n - CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params' (bsc#1241238)\n - CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n - CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)\n - CVE-2025-32914: Fixed out of bounds read in `soup_multipart_new_from_message()` (bsc#1241164) \n - CVE-2025-46420: Fixed memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686) \n - CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688) \n","status":"published","published":"2025-05-29T13:33:46Z","modified":"2026-02-04T04:35:49.591263Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01794-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) \n- CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) \n- CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263) \n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226) \n- CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252) \n- CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'. (bsc#1241238) \n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214) \n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162) \n","status":"published","published":"2025-06-02T09:04:15Z","modified":"2026-03-23T04:46:22.316679Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01801-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) \n- CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) \n- CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263) \n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226) \n- CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252) \n- CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'. (bsc#1241238) \n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214) \n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162) \n","status":"published","published":"2025-06-02T23:45:00Z","modified":"2026-03-23T04:47:37.592639Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01802-1","title":"Security update for libsoup2","description":"This update for libsoup2 fixes the following issues:\n\n- CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) \n- CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) \n- CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263) \n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226) \n- CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252) \n- CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'. (bsc#1241238) \n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214) \n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162) \n","status":"published","published":"2025-06-03T01:15:16Z","modified":"2026-03-23T04:46:23.061783Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01864-1","title":"Security update for libsoup2","description":"This update for libsoup2 fixes the following issues:\n\n- CVE-2025-4948: Fixed integer underflow in soup_multipart_new_from_message() leading to denial of service (bsc#1243332) \n- CVE-2025-4969: Fixed off-by-one out-of-bounds read may lead to infoleak (bsc#1243423) \n- CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263) \n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226) \n- CVE-2025-32910: Fixed null pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252) \n- CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params'. (bsc#1241238) \n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214) \n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162) \n","status":"published","published":"2025-06-10T14:05:01Z","modified":"2026-02-04T03:50:57.02117Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:1504-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing conten (bsc#1240750) \n - CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752) \n - CVE-2025-32051: Fixed segmentation fault when parsing malformed data URI (bsc#1240754)\n - CVE-2025-32052: Fixed heap buffer overflow in sniff_unknown() (bsc#1240756) \n - CVE-2025-32053: Fixed heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757) \n - CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n - CVE-2025-32907: Fixed excessive memory consumption in server when client requests a large amount of overlapping ranges in a single HTTP request (bsc#1241222) \n - CVE-2025-32908: Fixed HTTP request may lead to server crash due to HTTP/2 server not fully validating the values of pseudo-headers (bsc#1241223)\n - CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226)\n - CVE-2025-32910: Fixed NULL pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252)\n - CVE-2025-32911: Fixed double free on soup_message_headers_get_content_disposition() via 'params' (bsc#1241238)\n - CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n - CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)\n - CVE-2025-32914: Fixed out of bounds read in `soup_multipart_new_from_message()` (bsc#1241164) \n - CVE-2025-46420: Fixed memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686) \n - CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688) \n","status":"published","published":"2025-05-07T12:06:15Z","modified":"2026-02-04T04:24:16.382423Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1510-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n - CVE-2025-2784: Fixed heap buffer over-read in `skip_insignificant_space` when sniffing conten (bsc#1240750) \n - CVE-2025-32050: Fixed integer overflow in append_param_quoted (bsc#1240752) \n - CVE-2025-32051: Fixed segmentation fault when parsing malformed data URI (bsc#1240754)\n - CVE-2025-32052: Fixed heap buffer overflow in sniff_unknown() (bsc#1240756) \n - CVE-2025-32053: Fixed heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757) \n - CVE-2025-32906: Fixed out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n - CVE-2025-32907: Fixed excessive memory consumption in server when client requests a large amount of overlapping ranges in a single HTTP request (bsc#1241222) \n - CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226)\n - CVE-2025-32910: Fixed NULL pointer deference on client when server omits the realm parameter in an Unauthorized response with Digest authentication (bsc#1241252)\n - CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n - CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)\n - CVE-2025-32914: Fixed out of bounds read in `soup_multipart_new_from_message()` (bsc#1241164) \n - CVE-2025-46420: Fixed memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686) \n - CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688) \n","status":"published","published":"2025-05-07T14:38:16Z","modified":"2026-02-04T03:26:33.3954Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20375-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2025-2784: Fixed Heap buffer over-read in `skip_insignificant_space` when sniffing content (bsc#1240750)\n- CVE-2025-32050: Fixed Integer overflow in append_param_quoted (bsc#1240752)\n- CVE-2025-32051: Fixed Segmentation fault when parsing malformed data URI (bsc#1240754)\n- CVE-2025-32052: Fixed Heap buffer overflow in sniff_unknown() (bsc#1240756)\n- CVE-2025-32053: Fixed Heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space() (bsc#1240757)\n- CVE-2025-32913: Fixed NULL pointer dereference in soup_message_headers_get_content_disposition (bsc#1241162)\n- CVE-2025-32914: Fixed out of bounds read  in `soup_multipart_new_from_message()` (bsc#1241164)\n- CVE-2025-32912: Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n- CVE-2025-32907: Fixed xcessive memory consumption in server when client requests a large amount of overlapping\n  ranges in a single HTTP request (bsc#1241222)\n- CVE-2025-32906: Fixed Out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n- CVE-2025-32908: Fixed HTTP request may lead to server crash due to HTTP/2 server not fully validating the values\n  of pseudo-headers (bsc#1241223)\n- CVE-2025-32909: Fixed NULL pointer dereference in the sniff_mp4 function in soup-content-sniffer.c (bsc#1241226)\n- CVE-2025-32911: Fixed Double free on soup_message_headers_get_content_disposition() via \"params\" (bsc#1241238)\n- CVE-2025-32910: Fixed null pointer deference on client when server omits the 'realm' parameter in an Unauthorized\n  response with Digest authentication (bsc#1241252)\n- CVE-2025-46420: Fixed Memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686)\n- CVE-2025-46421: Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688)\n","status":"published","published":"2025-05-29T09:19:43Z","modified":"2026-03-23T04:48:15.062624Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20446-1","title":"Security update for libsoup","description":"This update for libsoup fixes the following issues:\n\n- CVE-2025-2784: Fixed Heap buffer over-read in `skip_insignificant_space` \n  when sniffing content (bsc#1240750)\n- CVE-2025-32050:Fixed Integer overflow in append_param_quoted (bsc#1240752)\n- CVE-2025-32051:Fixed Segmentation fault when parsing malformed data URI (bsc#1240754)\n- CVE-2025-32052:Fixed Heap buffer overflow in sniff_unknown() (bsc#1240756)\n- CVE-2025-32053:Fixed Heap buffer overflows in sniff_feed_or_html() and\n  skip_insignificant_space() (bsc#1240757)\n- CVE-2025-32913:Fixed NULL pointer dereference in \n  soup_message_headers_get_content_disposition (bsc#1241162)\n- CVE-2025-32914:Fixed out of bounds read  in `soup_multipart_new_from_message()` (bsc#1241164)\n- CVE-2025-32912:Fixed NULL pointer dereference in SoupAuthDigest (bsc#1241214)\n- CVE-2025-32907:Fixed excessive memory consumption in server when client requests\n  a large amount of overlapping ranges in a single HTTP request (bsc#1241222)\n- CVE-2025-32908:Fixed HTTP request leading to server crash due to HTTP/2 server not fully\n  validating the values of pseudo-headers (bsc#1241223)\n- CVE-2025-32909:Fixed NULL pointer dereference in the sniff_mp4 function in \n  soup-content-sniffer.c (bsc#1241226)\n- CVE-2025-32911:Fixed Double free on soup_message_headers_get_content_disposition() \n  via \"params\" (bsc#1241238)\n- CVE-2025-32910:Fixed null pointer deference on client when server omits the 'realm' \n  parameter in an Unauthorized response with Digest authentication (bsc#1241252)\n- CVE-2025-32906:Fixed Out of bounds reads in soup_headers_parse_request() (bsc#1241263)\n- CVE-2025-46420:Fixed Memory leak on soup_header_parse_quality_list() via soup-headers.c (bsc#1241686)\n- CVE-2025-46421:Fixed HTTP Authorization Header leak via an HTTP redirect (bsc#1241688) \n","status":"published","published":"2025-06-25T08:16:32Z","modified":"2026-03-23T04:50:09.231996Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7490-1","title":"libsoup2.4 vulnerabilities","description":"Tan Wei Chong discovered that libsoup incorrectly handled memory when\nparsing HTTP request headers. An attacker could possibly use this issue to\nsend a maliciously crafted HTTP request to the server, causing a denial of\nservice. (CVE-2025-32906)\n\nAlon Zahavi discovered that libsoup incorrectly parsed video files. An\nattacker could possibly use this issue to send a maliciously crafted HTTP\nresponse back to the client, causing a denial of service, or leading to\nundefined behavior. (CVE-2025-32909)\n\nJan Różański discovered that libsoup incorrectly handled memory when\nparsing authentication headers. An attacker could possibly use this issue\nto send a maliciously crafted HTTP response back to the client, causing a\ndenial of service. (CVE-2025-32910, CVE-2025-32912)\n\nIt was discovered that libsoup incorrectly handled data in the hash table\ndata type. An attacker could possibly use this issue to send a maliciously\ncrafted HTTP request to the server, causing a denial of service or remote\ncode execution. (CVE-2025-32911)\n\nJan Różański discovered that libsoup incorrectly handled memory when\nparsing the content disposition HTTP header. An attacker could possibly use\nthis issue to send maliciously crafted data to a client or server, causing\na denial of service. (CVE-2025-32913)\n\nAlon Zahavi discovered that libsoup incorrectly handled memory when parsing\nHTTP requests. An attacker could possibly use this issue to send a\nmaliciously crafted HTTP request to the server, causing a denial of service\nor obtaining sensitive information. (CVE-2025-32914)\n\nIt was discovered that libsoup incorrectly handled memory when parsing\nquality-list headers. An attacker could possibly use this issue to send a\nmaliciously crafted HTTP request to the server, causing a denial of\nservice. (CVE-2025-46420)\n\nJan Różański discovered that libsoup did not strip authorization\ninformation upon redirects. An attacker could possibly use this issue to\nobtain sensitive information. (CVE-2025-46421)\n","status":"published","published":"2025-05-06T13:12:38Z","modified":"2026-06-25T13:32:30.402347022Z","updated_at":"2026-11-02T16:58:19.988474Z"},{"id":"USN-7490-3","title":"libsoup3 vulnerabilities","description":"USN-7490-1 fixed vulnerabilities in libsoup2.4. This update provides the\ncorresponding updates for libsoup3.\n\nOriginal advisory details:\n\n Tan Wei Chong discovered that libsoup incorrectly handled memory when\n parsing HTTP request headers. An attacker could possibly use this issue to\n send a maliciously crafted HTTP request to the server, causing a denial of\n service. (CVE-2025-32906)\n \n Alon Zahavi discovered that libsoup incorrectly parsed video files. An\n attacker could possibly use this issue to send a maliciously crafted HTTP\n response back to the client, causing a denial of service, or leading to\n undefined behavior. (CVE-2025-32909)\n \n Jan Różański discovered that libsoup incorrectly handled memory when\n parsing authentication headers. An attacker could possibly use this issue\n to send a maliciously crafted HTTP response back to the client, causing a\n denial of service. (CVE-2025-32910, CVE-2025-32912)\n \n It was discovered that libsoup incorrectly handled data in the hash table\n data type. An attacker could possibly use this issue to send a maliciously\n crafted HTTP request to the server, causing a denial of service or remote\n code execution. (CVE-2025-32911)\n \n Jan Różański discovered that libsoup incorrectly handled memory when\n parsing the content disposition HTTP header. An attacker could possibly\n use this issue to send maliciously crafted data to a client or server,\n causing a denial of service. (CVE-2025-32913)\n \n Alon Zahavi discovered that libsoup incorrectly handled memory when\n parsing HTTP requests. An attacker could possibly use this issue to send a\n maliciously crafted HTTP request to the server, causing a denial of\n service or obtaining sensitive information. (CVE-2025-32914)\n \n It was discovered that libsoup incorrectly handled memory when parsing\n quality-list headers. An attacker could possibly use this issue to send a\n maliciously crafted HTTP request to the server, causing a denial of\n service. (CVE-2025-46420)\n \n Jan Różański discovered that libsoup did not strip authorization\n information upon redirects. An attacker could possibly use this issue to\n obtain sensitive information. (CVE-2025-46421)\n","status":"published","published":"2025-05-07T12:18:50Z","modified":"2026-04-27T17:56:40.460043Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}