CVE-2025-32052

MediumCVSS 6.5/10Last modified Nov 5, 2026

Description

A flaw was found in libsoup. A vulnerability in the sniff_unknown() function may lead to heap buffer over-read.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Weakness enumeration

CWE-126

Affected software

Vendor	Product	Versions
—	—	< 3.6.1
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Enterprise Linux 8.8 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 9	—
Red Hat	Red Hat Enterprise Linux 9.2 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	—
Red Hat	Red Hat Enterprise Linux 10	—
Red Hat	Red Hat Enterprise Linux 6	—
Red Hat	Red Hat Enterprise Linux 7	—

References

Timeline

Published: Apr 3, 2025
Last modified: Nov 5, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-320536.5A flaw was found in libsoup. A vulnerability in sniff_feed_or_html() and skip_insignificant_space() functions may lead to a heap buffer over CVE-2025-320543.3In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file CVE-2025-320564.0The anti-theft protection mechanism can be bypassed by attackers due to weak response generation algorithms for the head unit. It is possibl CVE-2025-320576.5The Infotainment ECU manufactured by Bosch which is installed in Nissan Leaf ZE1 – 2020 uses a Redbend service for over-the-air provisioning CVE-2025-320589.3The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interf CVE-2025-320598.8The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue result CVE-2025-32067.5A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. This vulnerability affects unknow CVE-2025-320606.7The system suffers from the absence of a kernel module signature verification. If an attacker can execute commands on behalf of root user (d CVE-2025-320618.8The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue result CVE-2025-320628.8The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch. The issue result CVE-2025-320636.8There is a misconfiguration vulnerability inside the Infotainment ECU manufactured by BOSCH. The vulnerability happens during the startup ph CVE-2025-320675.4Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Growth Experiments Extension allows Cross-Site Scripting (XS