2359357 – (CVE-2025-32913) CVE-2025-32913 libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header

Bug 2359357 (CVE-2025-32913) - CVE-2025-32913 libsoup: NULL pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in Content-Disposition header

Summary: CVE-2025-32913 libsoup: NULL pointer dereference in soup_message_headers_get...

Keywords:
Status:	NEW
Alias:	CVE-2025-32913
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	high
Severity:	high
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2359368 2359369 2359370
Blocks:
TreeView+	depends on / blocked

Reported:	2025-04-14 02:00 UTC by OSIDB Bzimport
Modified:	2025-04-14 13:07 UTC (History)
CC List:	0 users
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description OSIDB Bzimport 2025-04-14 02:00:58 UTC

libsoup prior to 3.6.2 is vulnerable to a null 
pointer dereference in soup_message_headers_get_content_disposition() . 
A malicious HTTP peer may crash a libsoup client or server that uses 
this function.

Note You need to log in before you can comment on or make changes to this bug.