CVE-2025-32910

MediumCVSS 6.5

Published: 14/04/2025(UTC)Updated: 30/06/2026(UTC)Translated: 01/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile - higher than 29% of all known CVEs

Summary

A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash.

Risk Assessment

An attacker can trigger a denial of service (DoS) by sending a specially crafted authentication request, causing a crash in applications using libsoup.

Recommendation

Immediately update the libsoup library to a version containing the fix that addresses the NULL pointer dereference vulnerability.

Original NVD description (English source)

A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash.