CVE-2025-32914

A flaw was found in libsoup, where the soup_multipart_new_from_message() function is vulnerable to an out-of-bounds read. This flaw allows a malicious HTTP client to induce the libsoup server to read out of bounds.
Configurations

No configuration.

History

03 Nov 2025, 20:18

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/04/msg00036.html -

17 Jun 2025, 12:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2025:7505 -
  • () https://access.redhat.com/errata/RHSA-2025:8126 -
  • () https://access.redhat.com/errata/RHSA-2025:8132 -
  • () https://access.redhat.com/errata/RHSA-2025:8139 -
  • () https://access.redhat.com/errata/RHSA-2025:8140 -
  • () https://access.redhat.com/errata/RHSA-2025:8252 -
  • () https://access.redhat.com/errata/RHSA-2025:8480 -
  • () https://access.redhat.com/errata/RHSA-2025:8481 -
  • () https://access.redhat.com/errata/RHSA-2025:8482 -
  • () https://access.redhat.com/errata/RHSA-2025:8663 -
  • () https://access.redhat.com/errata/RHSA-2025:9179 -

15 Apr 2025, 18:39

Type Values Removed Values Added
Summary
  • (es) Se encontró una falla en libsoup, donde la función soup_multipart_new_from_message() es vulnerable a una lectura fuera de los límites. Esta falla permite que un cliente HTTP malicioso induzca al servidor libsoup a realizar lecturas fuera de los límites.

14 Apr 2025, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-14 15:15

Updated : 2025-11-03 20:18


NVD link : CVE-2025-32914

Mitre link : CVE-2025-32914

CVE.ORG link : CVE-2025-32914


JSON object : View

Products Affected

No product.

CWE
CWE-125

Out-of-bounds Read