CVE-2025-32909

MediumCVSS 5.3

Published: 14/04/2025(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

A flaw was found in libsoup's SoupContentSniffer, specifically in the sniff_mp4 function, which may cause a NULL pointer dereference. A malicious HTTP server can exploit this to crash the libsoup client.

Risk Assessment

An attacker-controlled HTTP server can remotely crash applications using libsoup, leading to denial of service (DoS) and potential loss of availability.

Recommendation

Immediately update libsoup to a patched version. Monitor security advisories from your distribution for the fix.

Original NVD description (English source)

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.