CVE-2025-32052 - Vulnerability Details

Vendors	Products
Redhat	Enterprise Linux

Link	Providers
https://access.redhat.com/security/cve/CVE-2025-32052
https://bugzilla.redhat.com/show_bug.cgi?id=2357069
https://nvd.nist.gov/vuln/detail/CVE-2025-32052
https://www.cve.org/CVERecord?id=CVE-2025-32052

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2025-32052 https://www.cve.org/CVERecord?id=CVE-2025-32052
Metrics	threat_severity `None`	threat_severity `Moderate`

Type	Values Removed	Values Added
Weaknesses	CWE-122

Type	Values Removed	Values Added
Weaknesses		CWE-126
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.
Title		Libsoup: heap buffer overflow in sniff_unknown()
First Time appeared		Redhat Redhat enterprise Linux
Weaknesses		CWE-122
CPEs		cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9
Vendors & Products		Redhat Redhat enterprise Linux
References		https://access.redhat.com/security/cve/CVE-2025-32052 https://bugzilla.redhat.com/show_bug.cgi?id=2357069
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-32052", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2025-04-03T01:42:14.135Z", "datePublished": "2025-04-03T13:37:23.109Z", "dateUpdated": "2025-04-03T15:05:14.190Z"}, "containers": {"cna": {"title": "Libsoup: heap buffer overflow in sniff_unknown()", "metrics": [{"other": {"content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read."}], "affected": [{"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "unknown", "cpes": ["cpe:/o:redhat:enterprise_linux:6"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "unknown", "cpes": ["cpe:/o:redhat:enterprise_linux:7"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "affected", "cpes": ["cpe:/o:redhat:enterprise_linux:8"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "libsoup", "defaultStatus": "affected", "cpes": ["cpe:/o:redhat:enterprise_linux:9"]}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-32052", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357069", "name": "RHBZ#2357069", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "datePublic": "2025-04-03T00:00:00.000Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-126", "description": "Buffer Over-read", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-126: Buffer Over-read", "workarounds": [{"lang": "en", "value": "No mitigation is currently available for this vulnerability."}], "timeline": [{"lang": "en", "time": "2025-04-03T01:16:47.177000+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-04-03T00:00:00+00:00", "value": "Made public."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2025-04-03T15:05:14.190Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-03T14:44:39.371468Z", "id": "CVE-2025-32052", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-03T14:45:08.025Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-32052 (string)

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

state : PUBLISHED (string)

assignerShortName : redhat (string)

dateReserved : 2025-04-03T01:42:14.135Z (string)

datePublished : 2025-04-03T13:37:23.109Z (string)

dateUpdated : 2025-04-03T15:05:14.190Z (string)

}

containers : { »

cna : { »

title : Libsoup: heap buffer overflow in sniff_unknown() (string)

metrics : [ »

0 : { »

other : { »

content : { »

value : Moderate (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

type : Red Hat severity rating (string)

}

1 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L (string)

version : 3.1 (string)

}

format : CVSS (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read. (string)

}

]

affected : [ »

0 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 6 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : unknown (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:6 (string)

]

}

1 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : unknown (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

}

2 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : affected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:8 (string)

]

}

3 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 9 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : libsoup (string)

defaultStatus : affected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:9 (string)

]

}

]

references : [ »

0 : { »

url : https://access.redhat.com/security/cve/CVE-2025-32052 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357069 (string)

name : RHBZ#2357069 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

]

datePublic : 2025-04-03T00:00:00.000Z (string)

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-126 (string)

description : Buffer Over-read (string)

lang : en (string)

type : CWE (string)

}

]

}

]

x_redhatCweChain : CWE-126: Buffer Over-read (string)

workarounds : [ »

0 : { »

lang : en (string)

value : No mitigation is currently available for this vulnerability. (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2025-04-03T01:16:47.177000+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2025-04-03T00:00:00+00:00 (string)

value : Made public. (string)

}

]

providerMetadata : { »

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

dateUpdated : 2025-04-03T15:05:14.190Z (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-04-03T14:44:39.371468Z (string)

id : CVE-2025-32052 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-03T14:45:08.025Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-32052", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-03T14:44:39.371468Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-03T14:44:48.416Z"}}], "cna": {"title": "Libsoup: heap buffer overflow in sniff_unknown()", "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"cpes": ["cpe:/o:redhat:enterprise_linux:6"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unknown"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "libsoup", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2025-04-03T01:16:47.177000+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-04-03T00:00:00+00:00", "value": "Made public."}], "datePublic": "2025-04-03T00:00:00.000Z", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-32052", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357069", "name": "RHBZ#2357069", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "workarounds": [{"lang": "en", "value": "No mitigation is currently available for this vulnerability."}], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "Heap-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2025-04-03T13:37:23.109Z"}, "x_redhatCweChain": "CWE-122: Heap-based Buffer Overflow"}}, "cveMetadata": {"cveId": "CVE-2025-32052", "state": "PUBLISHED", "dateUpdated": "2025-04-03T14:45:08.025Z", "dateReserved": "2025-04-03T01:42:14.135Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2025-04-03T13:37:23.109Z", "assignerShortName": "redhat"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-32052 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-03T14:44:39.371468Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-03T14:44:48.416Z (string)

}

]

cna : { »

title : Libsoup: heap buffer overflow in sniff_unknown() (string)

metrics : [ »

0 : { »

other : { »

type : Red Hat severity rating (string)

content : { »

value : Moderate (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

1 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : LOW (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:6 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 6 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:8 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : affected (string)

}

3 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:9 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 9 (string)

packageName : libsoup (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : affected (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2025-04-03T01:16:47.177000+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2025-04-03T00:00:00+00:00 (string)

value : Made public. (string)

}

]

datePublic : 2025-04-03T00:00:00.000Z (string)

references : [ »

0 : { »

url : https://access.redhat.com/security/cve/CVE-2025-32052 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357069 (string)

name : RHBZ#2357069 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

]

workarounds : [ »

0 : { »

lang : en (string)

value : No mitigation is currently available for this vulnerability. (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-122 (string)

description : Heap-based Buffer Overflow (string)

}

]

}

]

providerMetadata : { »

orgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

shortName : redhat (string)

dateUpdated : 2025-04-03T13:37:23.109Z (string)

}

x_redhatCweChain : CWE-122: Heap-based Buffer Overflow (string)

}

cveMetadata : { »

cveId : CVE-2025-32052 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-03T14:45:08.025Z (string)

dateReserved : 2025-04-03T01:42:14.135Z (string)

assignerOrgId : 53f830b8-0a3f-465b-8143-3b8a9948e749 (string)

datePublished : 2025-04-03T13:37:23.109Z (string)

assignerShortName : redhat (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en libsoup. Una vulnerabilidad en la funci\u00f3n sniff_unknown() podr\u00eda provocar una sobrelectura del b\u00fafer del mont\u00f3n."}], "id": "CVE-2025-32052", "lastModified": "2025-04-07T14:18:34.453", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.5, "source": "secalert@redhat.com", "type": "Secondary"}]}, "published": "2025-04-03T14:15:44.077", "references": [{"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2025-32052"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357069"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-126"}], "source": "secalert@redhat.com", "type": "Primary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read. (string)

}

1 : { »

lang : es (string)

value : Se encontró una falla en libsoup. Una vulnerabilidad en la función sniff_unknown() podría provocar una sobrelectura del búfer del montón. (string)

}

]

id : CVE-2025-32052 (string)

lastModified : 2025-04-07T14:18:34.453 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : LOW (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 2.5 (number)

source : secalert@redhat.com (string)

type : Secondary (string)

}

]

}

published : 2025-04-03T14:15:44.077 (string)

references : [ »

0 : { »

source : secalert@redhat.com (string)

url : https://access.redhat.com/security/cve/CVE-2025-32052 (string)

}

1 : { »

source : secalert@redhat.com (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357069 (string)

}

]

sourceIdentifier : secalert@redhat.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-126 (string)

}

]

source : secalert@redhat.com (string)

type : Primary (string)

}

]

}

Show plain JSON

{"bugzilla": {"description": "libsoup: Heap buffer overflow in sniff_unknown()", "id": "2357069", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2357069"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "status": "draft"}, "cwe": "CWE-126", "details": ["A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.", "A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read."], "mitigation": {"lang": "en:us", "value": "No mitigation is currently available for this vulnerability."}, "name": "CVE-2025-32052", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "libsoup", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-04-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-32052\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-32052"], "threat_severity": "Moderate"}

{

bugzilla : { »

description : libsoup: Heap buffer overflow in sniff_unknown() (string)

id : 2357069 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2357069 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 6.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L (string)

status : draft (string)

}

cwe : CWE-126 (string)

details : [ »

0 : A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read. (string)

1 : A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read. (string)

]

mitigation : { »

lang : en:us (string)

value : No mitigation is currently available for this vulnerability. (string)

}

name : CVE-2025-32052 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Affected (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Affected (string)

package_name : libsoup (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2025-04-03T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2025-32052 https://nvd.nist.gov/vuln/detail/CVE-2025-32052 (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact Low

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object