Logo
vulnerabilityCVE-2025-32909
Name
CVE-2025-32909
Source
NVD ( link)Debian ( link)
Description
A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
libsoup
Patched
libsoup-2.4
Patched

Vulnerability Ratings#


5.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
2.74.3
Not Affected
buildroot
master
2.74.3
Not Affected
openwrt
master
3.7.1-r2
Not Affected
openwrt
openwrt-25.12
3.6.5-r1
Not Affected
yocto
kirkstone
3.0.7
Patched
yocto
kirkstone
2.74.2
Patched
yocto
master
3.6.6
Not Affected

Resolved with patches#


libsoup (yocto:kirkstone)

#
Title
Author
Resolve
1
content-sniffer: Handle sniffing resource shorter than 4
Patrick Griffis <pgriffis@igalia.com>
CVE-2025-32909

libsoup-2.4 (yocto:kirkstone)

#
Title
Author
Resolve
1
content-sniffer: Handle sniffing resource shorter than 4
Patrick Griffis <pgriffis@igalia.com>
CVE-2025-32909

libsoup-2.4 (yocto:scarthgap)

#
Title
Author
Resolve
1
content-sniffer: Handle sniffing resource shorter than 4
Patrick Griffis <pgriffis@igalia.com>
CVE-2025-32909