A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.
CVE-2025-32911
CVSS base score
9.0 (v3.1)
Severity
CRITICAL
Attack vector
Network
Weakness
CWE-590
Last modified
November 4, 2026
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H