5.3

CVE-2025-32907: libsoup2.4

CVSS: 5.3v3.1MediumDeferred
AliasesUBUNTU-CVE-2025-32907DEBIAN-CVE-2025-32907openSUSE-SU-2025:15043-1
Published 14-04-2025Last modified 30-06-2026
Open JSON

Vulnerability summary

CVE-2025-32907 is a medium (CVSS 5.3) vulnerability in libsoup2.4. EPSS estimates a 0.70% chance of exploitation in the next 30 days, higher than 52.1% of scored vulnerabilities.

Overall risk
21/100
0100
Low · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.70%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 19 · Related 12
MGASA-2025-0261OPENSUSE-SU-2025:15044-1RHSA-2025:4439RHSA-2025:4440RHSA-2025:4508RHSA-2025:7436

Timeline

  1. 14-04-2025
    PublishedVulnerability first disclosed.
  2. 30-06-2026
    Last modifiedVulnerability information updated.

Description

A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.70%

Chance of exploitation in the next 30 days

Percentile

52%

Versus all other CVEs

30-day change

+0.01 pp

From 0.68% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.70%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Debian2 products
  • libsoup2.4All versions (No fix recorded)
  • libsoup3All versions (No fix recorded) | < 3.6.5-2
Ubuntu2 products
  • libsoup2.4< 2.52.2-1ubuntu0.3+esm5 | < 2.62.1-1ubuntu0.4+esm6 | < 2.70.0-1ubuntu0.5+esm1 | < 2.74.2-3ubuntu0.6 | < 2.74.3-6ubuntu1.6 | < 2.74.3-10.1ubuntu4
  • libsoup3< 3.0.7-0ubuntu1+esm5 | < 3.4.4-5ubuntu0.5 | < 3.6.5-3
Opensuse1 product
  • libsoup&distro=openSUSE Tumbleweed< 3.6.5-3.1

3 vendors · 5 products

References

16 links
Show all 16 references