CVE-2025-32049

HighCVSS 7.5/10Last modified Jun 30, 2026

Description

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published: Apr 3, 2025
Last modified: Jun 30, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-32058.8A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. This affects an unknown part of the fi CVE-2025-320505.9A flaw was found in libsoup. The libsoup append_param_quoted() function may contain an overflow bug resulting in a buffer under-read.CVE-2025-320515.9A flaw was found in libsoup. The libsoup soup_uri_decode_data_uri() function may crash when processing malformed data URI. This flaw allows CVE-2025-320526.5A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.CVE-2025-320536.5A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over CVE-2025-320543.3In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file CVE-2025-320564.0The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possibl CVE-2025-320576.5The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redbend service for over-the-air provisioning CVE-2025-320589.3The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interf CVE-2025-320598.8The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue result CVE-2025-32067.5A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. This vulnerability affects unknow CVE-2025-320606.7The system suffers from the absence of a kernel module signature verification. If an attacker can execute commands on behalf of root user (d