All vulnerabilities
CVE-2025-32912
Libsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authentication
Description
A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash.
Patch Available
Fix available through Seal Security. No upgrade required, protect your application instantly.
Fix without upgrading
Score
6.5
Severity
Medium
Ecosystem
RPM
Publish Date
April 14, 2025
Modified Date
July 8, 2026
Score Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Versions
