Use-After-Free Memory Issue in libsoup Affects Red Hat Products
CVE-2025-32911

9CRITICAL

Key Information:

Status
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 8.2 Advanced Update Support
Vendor
CVE Published:
15 April 2025

What is CVE-2025-32911?

A vulnerability in libsoup has been identified, characterized as a use-after-free memory issue within the soup_message_headers_get_content_disposition() function. This deficiency may be exploited by a malicious HTTP client, potentially leading to memory corruption on the libsoup server. By triggering this vulnerability, attackers could compromise the stability and security of affected software, posing a risk to system integrity and data confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://access.redhat.com/errata/RHSA-2025:21657
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:4439
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:4440
vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.