CVE-2025-32911
Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value
A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.
Reserved 2025-04-14 | Published 2025-04-15 | Updated 2025-04-28 | Assigner redhatFree of Memory not on the Heap
| 2025-04-14: | Reported to Red Hat. |
| 2025-04-14: | Made public. |
access.redhat.com/security/cve/CVE-2025-32911
bugzilla.redhat.com/show_bug.cgi?id=2359355 (RHBZ#2359355)
Support options
