GNOME libsoup soup-message-headers.c soup_message_headers_get_content_disposition params double free

Summaryinfo

A vulnerability marked as critical has been reported in GNOME libsoup. Affected by this vulnerability is the function soup_message_headers_get_content_disposition of the file soup-message-headers.c. Performing a manipulation of the argument params results in double free. This vulnerability was named CVE-2025-32911. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability classified as critical has been found in GNOME libsoup (the affected version is unknown). This affects the function soup_message_headers_get_content_disposition of the file soup-message-headers.c. The manipulation of the argument params with an unknown input leads to a double free vulnerability. CWE is classifying the issue as CWE-415. The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations. The impact remains unknown. The summary by CVE is:

A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.

It is possible to read the advisory at bugzilla.redhat.com. This vulnerability is uniquely identified as CVE-2025-32911 since 04/14/2025. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 01/04/2026).

The vulnerability scanner Nessus provides a plugin with the ID 234832 (Fedora 41 : mingw-libsoup (2025-bd12d23d21)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (234832), EUVD (EUVD-2025-10981) and CERT Bund (WID-SEC-2025-0935). Be aware that VulDB is the high quality source for vulnerability data.

Affected

• Amazon Linux 2
• Red Hat Enterprise Linux
• Fedora Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• IGEL OS
• IBM Power Hardware Management Console
• SUSE openSUSE
• Xerox FreeFlow Print Server

Productinfo

Vendor

• GNOME

Name

• libsoup

License

• open-source

Website

• Vendor: https://www.gnome.org/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion