CVE-2025-32911

A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.

Scoring

Severity

CRITICAL

CVSS base score

9

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS probability

0.91%

CWE

CWE-590

Published

2025-04-15

Last modified

2026-06-29

Affected products

• Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support
• Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Weakness type

• CWE-590

Related vulnerabilities

• CVE-2026-89161 — In PCRE2 before 10.48, pcre2_jit_match mishandles a previously copied subject being passed in as a...
• CVE-2026-18582 — mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
• CVE-2025-7006 — Avast antivirus use of stack memory after free when scanning a malformed PE file
• CVE-2026-47328 — Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling
• CVE-2026-20810 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
• CVE-2025-54899 — Microsoft Excel Remote Code Execution Vulnerability
• CVE-2025-42996 — Multiple vulnerabilities in SAP MDM Server
• CVE-2025-42995 — Multiple vulnerabilities in SAP MDM Server

Markdown version · Browse all CVEs