CVE-2025-32913: Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition header
A flaw was found in libsoup, where the soupmessageheadersgetcontentdisposition() function is vulnerable to a NULL pointer dereference. This flaw allows a malicious HTTP peer to crash a libsoup client or server that uses this function.
Other sources
libsoup prior to 3.6.2 is vulnerable to a null pointer dereference in soupmessageheadersgetcontentdisposition() . A malicious HTTP peer may crash a libsoup client or server that uses this function.
— Red Hat
Libsoup: null pointer dereference in soupmessageheadersgetcontentdisposition when "filename" parameter is present, but has no value in content-disposition header
— Microsoft
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libsoup2.4to a version that resolves this vulnerability.Fixed in 2.72.0-2+deb11u2Fixed in 2.74.3-10.1 - Upgrade
Upgrade
debian/libsoup3to a version that resolves this vulnerability.Fixed in 3.6.5-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.0.4-3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 3.4.4-3 - Upgrade
Upgrade
libsoupto a version that resolves this vulnerability.Fixed in 3.6.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32913?
CVE-2025-32913 is a high-severity vulnerability that could lead to crashes in libsoup clients or servers.
How do I fix CVE-2025-32913?
To fix CVE-2025-32913, upgrade libsoup to version 3.6.2 or later.
Which versions of libsoup are affected by CVE-2025-32913?
CVE-2025-32913 affects libsoup versions prior to 3.6.2.
What type of vulnerability is CVE-2025-32913?
CVE-2025-32913 is a NULL pointer dereference vulnerability in the soup_message_headers_get_content_disposition() function.
Who can exploit CVE-2025-32913?
A malicious HTTP peer can exploit CVE-2025-32913 to crash a libsoup client or server.