PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2025-32911

CVE-2025-32911

libsoup: Double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" GHashTable value

Loading…

Severity

Important

Red Hat Product Security

9

CVSS 3.1

Review impact separately from score.

Published · April 14, 2025

Updated · November 1, 2026

Description

A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Currently, no mitigation is available for this vulnerability.

CVSS / CWE

CVSS 3.1 · 9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-590 · Free of Memory not on the Heap