Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-32909

Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c

Description

A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniff_mp4 function. The HTTP server may cause the libsoup client to crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libsoup

Default version status: unaffected

  • 0 to < 3.6.2affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:2.8-3.el8_10.1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:8.10-1 to < *unaffected

Red Hat Red Hat Enterprise Linux 10

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

References