CVE-2025-32050 - Vulnerability Details

Vendors	Products
Redhat	Enterprise Linux

Link	Providers
https://access.redhat.com/security/cve/CVE-2025-32050
https://bugzilla.redhat.com/show_bug.cgi?id=2357067
https://nvd.nist.gov/vuln/detail/CVE-2025-32050
https://www.cve.org/CVERecord?id=CVE-2025-32050

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2025-32050 https://www.cve.org/CVERecord?id=CVE-2025-32050
Metrics	threat_severity `None`	threat_severity `Moderate`

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read.
Title		Libsoup: integer overflow in append_param_quoted
First Time appeared		Redhat Redhat enterprise Linux
Weaknesses		CWE-127
CPEs		cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9
Vendors & Products		Redhat Redhat enterprise Linux
References		https://access.redhat.com/security/cve/CVE-2025-32050 https://bugzilla.redhat.com/show_bug.cgi?id=2357067
Metrics		cvssV3_1 `{'score': 5.9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-32050", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2025-04-03T01:42:14.135Z", "datePublished": "2025-04-03T13:36:29.141Z", "dateUpdated": "2025-04-03T14:57:28.366Z"}, "containers": {"cna": {"title": "Libsoup: integer overflow in append_param_quoted", "metrics": [{"other": {"content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read."}], "affected": [{"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "unknown", "cpes": ["cpe:/o:redhat:enterprise_linux:6"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "unknown", "cpes": ["cpe:/o:redhat:enterprise_linux:7"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "affected", "cpes": ["cpe:/o:redhat:enterprise_linux:8"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "affected", "cpes": ["cpe:/o:redhat:enterprise_linux:9"]}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-32050", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357067", "name": "RHBZ#2357067", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "datePublic": "2025-04-03T00:00:00.000Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-127", "description": "Buffer Under-read", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-127: Buffer Under-read", "workarounds": [{"lang": "en", "value": "No mitigation is currently available for this vulnerability."}], "timeline": [{"lang": "en", "time": "2025-04-03T01:17:42.454000+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-04-03T00:00:00+00:00", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2025-04-03T13:36:29.141Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-03T14:56:24.491360Z", "id": "CVE-2025-32050", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-03T14:57:28.366Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-32050 (string)

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

state : PUBLISHED (string)

assignerShortName : redhat (string)

dateReserved : 2025-04-03T01:42:14.135Z (string)

datePublished : 2025-04-03T13:36:29.141Z (string)

dateUpdated : 2025-04-03T14:57:28.366Z (string)

}

containers : { »

cna : { »

title : Libsoup: integer overflow in append_param_quoted (string)

metrics : [ »

0 : { »

other : { »

content : { »

value : Moderate (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

type : Red Hat severity rating (string)

}

1 : { »

cvssV3_1 : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 5.9 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read. (string)

}

]

affected : [ »

0 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 6 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : unknown (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:6 (string)

]

}

1 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : unknown (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

}

2 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : affected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:8 (string)

]

}

3 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 9 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : affected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:9 (string)

]

}

]

references : [ »

0 : { »

url : https://access.redhat.com/security/cve/CVE-2025-32050 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357067 (string)

name : RHBZ#2357067 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

]

datePublic : 2025-04-03T00:00:00.000Z (string)

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-127 (string)

description : Buffer Under-read (string)

lang : en (string)

type : CWE (string)

}

]

}

]

x_redhatCweChain : CWE-127: Buffer Under-read (string)

workarounds : [ »

0 : { »

lang : en (string)

value : No mitigation is currently available for this vulnerability. (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2025-04-03T01:17:42.454000+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2025-04-03T00:00:00+00:00 (string)

value : Made public. (string)

}

]

providerMetadata : { »

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

dateUpdated : 2025-04-03T13:36:29.141Z (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-04-03T14:56:24.491360Z (string)

id : CVE-2025-32050 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-03T14:57:28.366Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-32050", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-03T14:56:24.491360Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-03T14:56:29.704Z"}}], "cna": {"title": "Libsoup: integer overflow in append_param_quoted", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"cpes": ["cpe:/o:redhat:enterprise_linux:6"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2025-04-03T01:17:42.454000+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-04-03T00:00:00+00:00", "value": "Made public."}], "datePublic": "2025-04-03T00:00:00.000Z", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-32050", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357067", "name": "RHBZ#2357067", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "workarounds": [{"lang": "en", "value": "No mitigation is currently available for this vulnerability."}], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-127", "description": "Buffer Under-read"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2025-04-03T13:36:29.141Z"}, "x_redhatCweChain": "CWE-127: Buffer Under-read"}}, "cveMetadata": {"cveId": "CVE-2025-32050", "state": "PUBLISHED", "dateUpdated": "2025-04-03T14:57:28.366Z", "dateReserved": "2025-04-03T01:42:14.135Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2025-04-03T13:36:29.141Z", "assignerShortName": "redhat"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-32050 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-03T14:56:24.491360Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-03T14:56:29.704Z (string)

}

]

cna : { »

title : Libsoup: integer overflow in append_param_quoted (string)

metrics : [ »

0 : { »

other : { »

type : Red Hat severity rating (string)

content : { »

value : Moderate (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

1 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.9 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : HIGH (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:6 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 6 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:8 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : affected (string)

}

3 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:9 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 9 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : affected (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2025-04-03T01:17:42.454000+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2025-04-03T00:00:00+00:00 (string)

value : Made public. (string)

}

]

datePublic : 2025-04-03T00:00:00.000Z (string)

references : [ »

0 : { »

url : https://access.redhat.com/security/cve/CVE-2025-32050 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357067 (string)

name : RHBZ#2357067 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

]

workarounds : [ »

0 : { »

lang : en (string)

value : No mitigation is currently available for this vulnerability. (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-127 (string)

description : Buffer Under-read (string)

}

]

}

]

providerMetadata : { »

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

dateUpdated : 2025-04-03T13:36:29.141Z (string)

}

x_redhatCweChain : CWE-127: Buffer Under-read (string)

}

cveMetadata : { »

cveId : CVE-2025-32050 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-03T14:57:28.366Z (string)

dateReserved : 2025-04-03T01:42:14.135Z (string)

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

datePublished : 2025-04-03T13:36:29.141Z (string)

assignerShortName : redhat (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en libsoup. La funci\u00f3n append_param_quoted() de libsoup podr\u00eda contener un error de desbordamiento que provoca una lectura insuficiente del b\u00fafer."}], "id": "CVE-2025-32050", "lastModified": "2025-04-07T14:18:34.453", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "secalert@redhat.com", "type": "Primary"}]}, "published": "2025-04-03T14:15:43.690", "references": [{"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2025-32050"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357067"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-127"}], "source": "secalert@redhat.com", "type": "Primary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read. (string)

}

1 : { »

lang : es (string)

value : Se encontró una falla en libsoup. La función append_param_quoted() de libsoup podría contener un error de desbordamiento que provoca una lectura insuficiente del búfer. (string)

}

]

id : CVE-2025-32050 (string)

lastModified : 2025-04-07T14:18:34.453 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 5.9 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.2 (number)

impactScore : 3.6 (number)

source : secalert@redhat.com (string)

type : Primary (string)

}

]

}

published : 2025-04-03T14:15:43.690 (string)

references : [ »

0 : { »

source : secalert@redhat.com (string)

url : https://access.redhat.com/security/cve/CVE-2025-32050 (string)

}

1 : { »

source : secalert@redhat.com (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357067 (string)

}

]

sourceIdentifier : secalert@redhat.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-127 (string)

}

]

source : secalert@redhat.com (string)

type : Primary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "libsoup: Integer overflow in append_param_quoted", "id": "2357067", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357067"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-127", "details": ["A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read.", "A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read."], "mitigation": {"lang": "en:us", "value": "No mitigation is currently available for this vulnerability."}, "name": "CVE-2025-32050", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-04-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-32050\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-32050"], "threat_severity": "Moderate"}

{

bugzilla : { »

description : libsoup: Integer overflow in append_param_quoted (string)

id : 2357067 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357067 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 5.9 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

status : draft (string)

}

cwe : CWE-127 (string)

details : [ »

0 : A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read. (string)

1 : A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read. (string)

]

mitigation : { »

lang : en:us (string)

value : No mitigation is currently available for this vulnerability. (string)

}

name : CVE-2025-32050 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Affected (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Affected (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2025-04-03T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2025-32050 https://nvd.nist.gov/vuln/detail/CVE-2025-32050 (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object