The vulnerability of the soup_message_headers_get_content_disposition() function in the libsoup library for GNOME graphical interfaces allows a attacker to trigger a service failure.

🗓️ 02 Jun 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Vulnerability in libsoup's soup_message_headers_get_content_disposition allows remote attackers to trigger service failure with crafted POST requests.

Reporter	Title	Published	Views	Family All 222
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libsoup library (CVE-2025-32050, CVE-2025-32052, CVE-2025-32053, CVE-2025-32906, CVE-2025-32911, CVE-2025-32913, CVE-2025-46420, CVE-2025-46421) affect Power HMC.	14 Jul 202506:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	30 Sep 202508:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	22 May 202509:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management	19 Nov 202512:57	–	ibm
ATTACKERKB	CVE-2025-32913	14 Apr 202514:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2025-941)	29 Apr 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : libsoup, libsoup-devel (ALAS2023-2025-962)	13 May 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libsoup (ALAS-2025-2849)	13 May 202500:00	–	nessus
Tenable Nessus	Amazon Linux AMI : libsoup (ALAS-2025-1979)	27 May 202500:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0061: libsoup (ALINUX3-SA-2025:0061)	19 May 202500:00	–	nessus

Vulners

Node

gnome libsoupRange<3.6.2

OR

red_hat red_hat_enterprise_linuxMatch7

OR

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

OR

novell suse_liberty_linuxMatch9

OR

novell suse_liberty_linuxMatch8

OR

novell opensuse_leapMatch15.6

OR

canonical ubuntuMatch24.10

OR

canonical ubuntuMatch25.04

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-32913
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2025/04/18/4
gitlab	www.gitlab.gnome.org/GNOME/libsoup/-/issues/435
security-tracker	www.security-tracker.debian.org/tracker/CVE-2025-32913
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-libsoup/
wiz	www.wiz.io/vulnerability-database/cve/cve-2025-32913
suse	www.suse.com/security/cve/CVE-2025-32913.html
ubuntu	www.ubuntu.com/security/CVE-2025-32913
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2948

20 Apr 2026 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 37.5

CVSS 27.8

EPSS0.00694

libsoup content disposition remote attack service failure crafted post gnome