# CVE-2025-32911

## Summary

- **CVE ID:** CVE-2025-32911
- **Severity:** CRITICAL
- **CVSS Score:** 9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
- **CWE:** CWE-590
- **Published:** Apr 15, 2025
- **Last Modified:** Jun 29, 2026

## Description

A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.

## Affected Products

- Unknown product (0)
- Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:2.62.2-9.el7_9)
- Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:2.62.2-6.el7_9)
- Red Hat — Red Hat Enterprise Linux 8 (0:2.62.3-8.el8_10)
- Red Hat — Red Hat Enterprise Linux 8 (0:2.8-3.el8_10.1)
- Red Hat — Red Hat Enterprise Linux 8 (0:8.10-1)
- Red Hat — Red Hat Enterprise Linux 8.2 Advanced Update Support (0:2.62.3-1.el8_2.4)
- Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:2.62.3-2.el8_4.4)
- Red Hat — Red Hat Enterprise Linux 8.4 Telecommunications Update Service (0:2.62.3-2.el8_4.4)
- Red Hat — Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions (0:2.62.3-2.el8_4.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:2.62.3-2.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:2.62.3-2.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:2.62.3-2.el8_6.4)
- Red Hat — Red Hat Enterprise Linux 8.8 Extended Update Support (0:2.62.3-3.el8_8.4)
- Red Hat — Red Hat Enterprise Linux 9 (0:2.72.0-10.el9_6.1)
- Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:2.72.0-8.el9_0.4)
- Red Hat — Red Hat Enterprise Linux 9.2 Extended Update Support (0:2.72.0-8.el9_2.4)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:2.72.0-8.el9_4.4)

## References

- [CNA](https://access.redhat.com/errata/RHSA-2025:21657)
- [CNA](https://access.redhat.com/errata/RHSA-2025:4439)
- [CNA](https://access.redhat.com/errata/RHSA-2025:4440)
- [CNA](https://access.redhat.com/errata/RHSA-2025:4508)
- [CNA](https://access.redhat.com/errata/RHSA-2025:4538)
- [CNA](https://access.redhat.com/errata/RHSA-2025:4560)
- [CNA](https://access.redhat.com/errata/RHSA-2025:4568)
- [CNA](https://access.redhat.com/errata/RHSA-2025:4609)
- [CNA](https://access.redhat.com/errata/RHSA-2025:4624)
- [CNA](https://access.redhat.com/errata/RHSA-2025:7436)
- [CNA](https://access.redhat.com/errata/RHSA-2025:8292)
- [CNA](https://access.redhat.com/errata/RHSA-2025:9179)
- [CNA](https://access.redhat.com/security/cve/CVE-2025-32911)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2359355)
- [CVE](https://lists.debian.org/debian-lts-announce/2025/04/msg00036.html)
- [CNA](https://gitlab.gnome.org/GNOME/libsoup/-/issues/433)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.91%
- **EPSS Percentile:** 57.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._