CVE-2025-32906
libsoup: Out of bounds reads in soup_headers_parse_request()
Loading…
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 14, 2025
Updated · November 1, 2026
Description
A flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Currently, no mitigation was found for this vulnerability.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-125 · Out-of-bounds Read