CVE-2025-32906
Libsoup: out of bounds reads in soup_headers_parse_request()
CVSS 3.1 7.5 HIGHCheck source for fixed versionsKEV status unknown
cve-program · CVE-2025-32906
PublishedA flaw was found in libsoup, where the soup_headers_parse_request() function may be vulnerable to an out-of-bound read. This flaw allows a malicious user to use a specially crafted HTTP request to crash the HTTP server.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2025-32906 · CVE overview and exploitation status
cve-program · CVE-2025-32906
- https://access.redhat.com/errata/RHSA-2025:21657
- https://access.redhat.com/errata/RHSA-2025:4439
- https://access.redhat.com/errata/RHSA-2025:4440
- https://access.redhat.com/errata/RHSA-2025:4508
- https://access.redhat.com/errata/RHSA-2025:4538
- https://access.redhat.com/errata/RHSA-2025:4560
- https://access.redhat.com/errata/RHSA-2025:4568
- https://access.redhat.com/errata/RHSA-2025:4609
- https://access.redhat.com/errata/RHSA-2025:4624
- https://access.redhat.com/errata/RHSA-2025:7436
- https://access.redhat.com/errata/RHSA-2025:7505
- https://access.redhat.com/errata/RHSA-2025:8292
- https://access.redhat.com/security/cve/CVE-2025-32906
- https://bugzilla.redhat.com/show_bug.cgi?id=2359341
- https://gitlab.gnome.org/GNOME/libsoup/-/issues/404
Related changes
Linked by CVE identifier- Libsoup: out of bounds reads in soup_headers_parse_request() · Affected-version evidence changed · 4 Nov 2026
- Libsoup: out of bounds reads in soup_headers_parse_request() · Affected-version evidence changed · 1 Nov 2026