CVE Catalog

CVE-2025-32051

MediumCVSS 5.9
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.48%

38th percentile - higher than 38% of all known CVEs

Summary

A flaw was found in the libsoup library in the soup_uri_decode_data_uri() function, which may crash when processing malformed data URIs. This vulnerability allows an attacker to cause a denial of service (DoS).

Risk Assessment

An attacker can remotely crash applications using libsoup, leading to service disruption and potential loss of availability for users.

Recommendation

Immediately update the libsoup library to a patched version. If an update is not possible, restrict access to applications using libsoup to trusted sources only.

Original NVD description (English source)

A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows an attacker to cause a denial of service (DoS).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS