Denial of Service Vulnerability in libsoup Affects Red Hat
CVE-2025-32051

5.9MEDIUM

Key Information:

Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Vendor
CVE Published:
3 April 2025

What is CVE-2025-32051?

A vulnerability exists in libsoup's soup_uri_decode_data_uri() function, which could lead to a denial of service. This flaw occurs when the function processes malformed data URIs, potentially causing the application to crash. Attackers can exploit this vulnerability to disrupt service, impacting the availability of applications that rely on libsoup. Proper validation of data URIs is essential to mitigate this risk and ensure consistent application performance.

References

https://access.redhat.com/security/cve/CVE-2025-32051
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2357068
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.