CVE-2025-32052 json
Libsoup: heap buffer overflow in sniff_unknown()
published last yr. modified 4d ago also EUVD-2025-9631
- cvss
- 6.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 52%
- public exploits
- 0
- none known
Summary
A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
Patch / fix
- gitlab.gnome.org libsoup 3.6.1
- Red Hat Red Hat Enterprise Linux 8 0:2.8-3.el8_10.1, 0:2.62.3-8.el8_10, 0:8.10-1
- Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support 0:2.62.3-3.el8_8.4
- Red Hat Red Hat Enterprise Linux 9 0:2.72.0-10.el9_6.1
- Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support 0:2.72.0-8.el9_2.4
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support 0:2.72.0-8.el9_4.4
- libsoup3 Debian 12 3.2.3-0+deb12u1
- libsoup3 Debian 13 3.6.1-1
- libsoup2.4 Debian 13 2.74.3-10
debian advisories DEBIAN-CVE-2025-32052
- libsoup3 Ubuntu 24.04 LTS 3.4.4-5ubuntu0.2
- libsoup2.4 Ubuntu 20.04 LTS 2.70.0-1ubuntu0.2
- libsoup2.4 Ubuntu 22.04 LTS 2.74.2-3ubuntu0.2
- libsoup2.4 Ubuntu 24.04 LTS 2.74.3-6ubuntu1.2
- libsoup3 Ubuntu Pro 22.04 LTS 3.0.7-0ubuntu1+esm2
- libsoup2.4 Ubuntu Pro 16.04 LTS 2.52.2-1ubuntu0.3+esm4
- libsoup2.4 Ubuntu Pro 18.04 LTS 2.62.1-1ubuntu0.4+esm5
ubuntu advisories UBUNTU-CVE-2025-32052
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- mingw-freetype RHEL 8 2.8-3.el8_10.1
- spice-client-win RHEL 8 8.10-1.el8_10
- mingw32-freetype RHEL 8 2.8-3.el8_10.1
- mingw64-freetype RHEL 8 2.8-3.el8_10.1
- spice-client-win-x64 RHEL 8 8.10-1.el8_10
- spice-client-win-x86 RHEL 8 8.10-1.el8_10
- libsoup RHEL 9 2.72.0-10.el9_6.1
- libsoup RHEL 8 2.62.3-8.el8_10
red hat advisories RHSA-2025:8292RHSA-2025:7436RHSA-2025:4568RHSA-2025:4560RHSA-2025:4508RHSA-2025:4440
- libsoup Linux Micro 6.1 3.4.4-slfo.1.1_3.1
- libsoup SLE Module for Basesystem 15 SP7, SLE Module for Basesystem 15 SP6, openSUSE Leap 15.6 3.4.4-150600.3.7.1
- libsoup2 SLE Module for Basesystem 15 SP7, SLE Module for Basesystem 15 SP6, openSUSE Leap 15.6 2.74.3-150600.4.6.1
- libsoup Linux Micro 6.0 3.4.2-6.1
- libsoup SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE Micro 5.2 +2 more 2.68.4-150200.4.6.1
- libsoup SLES for SAP 15 SP5, SLES for SAP 15 SP4, SLES 15 SP5-LTSS +7 more 3.0.4-150400.3.7.1
- libsoup2 SLES for SAP 15 SP5, SLES for SAP 15 SP4, SLES 15 SP5-LTSS +10 more 2.74.2-150400.3.6.1
- libsoup SLES LTSS Extended Security 12 SP5, SLES 12 SP5-LTSS 2.62.2-5.12.1
suse advisories SUSE-SU-2025:20446-1SUSE-SU-2025:01504-1SUSE-SU-2025:01503-1SUSE-SU-2025:20375-1SUSE-SU-2025:1519-1SUSE-SU-2025:1518-1
- libsoup2 openSUSE Tumbleweed 2.74.3-8.1
opensuse advisories openSUSE-SU-2025:15018-1
- mingw32-freetype AlmaLinux 8 2.8-3.el8_10.1
- mingw64-freetype AlmaLinux 8 2.8-3.el8_10.1
- libsoup AlmaLinux 9 2.72.0-10.el9_6.1
- libsoup AlmaLinux 8 2.62.3-8.el8_10
almalinux advisories ALSA-2025:8292ALSA-2025:7436ALSA-2025:4560
- mingw-freetype Rocky Linux 8 2.8-3.el8_10.1
- spice-client-win Rocky Linux 8 8.10-1.el8_10
- libsoup Rocky Linux 8 2.62.3-8.el8_10
rocky linux advisories RLSA-2025:8292RLSA-2025:4560
- libsoup CBL-Mariner 2.0 3.0.4-6
- libsoup Azure Linux 3.0 3.4.4-6
azure linux advisories AZL-59530AZL-59559
Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT
Is CVE-2025-32052 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerVendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2025-32052 updated cvss 6.5
libsoup: Heap buffer overflow in sniff_unknown()
-
Red Hat Enterprise Linux 6 libsoup Red Hat Enterprise Linux 7 libsoupaffected: workaround, no fix planned “No mitigation is currently available for this vulnerability.”
-
Red Hat Enterprise Linux AppStream (v. 8) spice-client-win 8.10-1.el8_10, spice-client-win-x64 8.10-1.el8_10, spice-client-win-x86 8.10-1.el8_10fixed: vendor fix “No mitigation is currently available for this vulnerability.” RHSA-2025:4560
-
Red Hat Enterprise Linux AppStream (v. 9) libsoup 2.72.0-10.el9_6.1fixed: vendor fix “No mitigation is currently available for this vulnerability.” RHSA-2025:7436
-
Red Hat Enterprise Linux AppStream EUS (v.8.8) libsoup-devel 2.62.3-3.el8_8.4, libsoup-debuginfo 2.62.3-3.el8_8.4, libsoup-debugsource 2.62.3-3.el8_8.4fixed: vendor fix “No mitigation is currently available for this vulnerability.” RHSA-2025:4568
-
Red Hat Enterprise Linux AppStream EUS (v.9.2) libsoup 2.72.0-8.el9_2.4fixed: vendor fix “No mitigation is currently available for this vulnerability.” RHSA-2025:4508
-
Red Hat Enterprise Linux AppStream EUS (v.9.4) libsoup 2.72.0-8.el9_4.4fixed: vendor fix “No mitigation is currently available for this vulnerability.” RHSA-2025:4440
-
Red Hat Enterprise Linux BaseOS (v. 8) libsoup 2.62.3-8.el8_10fixed: vendor fix “No mitigation is currently available for this vulnerability.” RHSA-2025:4560
-
Red Hat Enterprise Linux BaseOS EUS (v.8.8) libsoup 2.62.3-3.el8_8.4fixed: vendor fix “No mitigation is currently available for this vulnerability.” RHSA-2025:4568
show 2 moreshow fewer
-
Red Hat Enterprise Linux CRB (v. 8) mingw-freetype 2.8-3.el8_10.1, mingw32-freetype 2.8-3.el8_10.1, mingw64-freetype 2.8-3.el8_10.1fixed: vendor fix “No mitigation is currently available for this vulnerability.” RHSA-2025:8292
-
Red Hat Enterprise Linux 10 libsoup3not affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- last yr.
Exploit prediction
0.67% chance of exploitation in the next 30 days, higher than 52% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L |
Affected products
- gitlab.gnome.org libsoup
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
Classification
- Weakness
-
- CWE-126 Buffer Over-read
References
-
access.redhat.com
/errata/RHSA-2025:4440
vendor-advisory
-
access.redhat.com
/errata/RHSA-2025:4508
vendor-advisory
-
access.redhat.com
/errata/RHSA-2025:4560
vendor-advisory
-
access.redhat.com
/errata/RHSA-2025:4568
vendor-advisory
-
access.redhat.com
/errata/RHSA-2025:7436
vendor-advisory
-
access.redhat.com
/errata/RHSA-2025:8292
vendor-advisory
-
access.redhat.com
/security/cve/CVE-2025-32052
vdb-entry
-
bugzilla.redhat.com
/show_bug.cgi?id=2357069
issue-tracking
- gitlab.gnome.org /GNOME/libsoup/-/issues/425
- lists.debian.org /debian-lts-announce/2025/04/msg00036.html
Sources
- CVE List CVE-2025-32052
- NVD CVE-2025-32052
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.