CVE-2025-32912

MediumCVSS 6.5

Published: 14/04/2025(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile - higher than 29% of all known CVEs

Summary

A NULL pointer dereference vulnerability was found in the SoupAuthDigest authentication mechanism of the libsoup library. A malicious HTTP server can exploit this flaw to crash the libsoup client.

Risk Assessment

An attacker-controlled HTTP server can remotely crash applications using libsoup, leading to a denial of service (DoS) for end users.

Recommendation

Immediately update libsoup to the latest patched version. If an update is not possible, restrict connections to trusted HTTP servers only.

Original NVD description (English source)

A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash.