The vulnerability CVE-2025-32052 is a heap buffer overflow in the sniff_unknown() function of libsoup, an HTTP client and server library used in GNOME. This flaw can cause a heap buffer over-read, which may lead to denial of service or limited information disclosure. The vulnerability has a CVSS 3.1 base score of 6.5 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality and availability. Red Hat has released security updates for multiple Red Hat Enterprise Linux 9.x variants that include fixes for this and several other libsoup vulnerabilities. The vendor advisories provide detailed package updates and instructions for remediation.

The vulnerability may allow an attacker to cause a heap buffer over-read in applications using the vulnerable libsoup library, potentially leading to application crashes (denial of service) or limited information disclosure. The CVSS score of 6.5 reflects a medium severity impact with confidentiality and availability affected. There are no known exploits in the wild at this time. The issue affects multiple Red Hat Enterprise Linux 9.x Extended Update Support and Update Services for SAP Solutions versions.

Red Hat has released official security updates that fix this vulnerability in libsoup for Red Hat Enterprise Linux 9.2 and 9.4 Extended Update Support releases. Users and administrators should apply the relevant security updates as detailed in the Red Hat advisories RHSA-2025:4440 and RHSA-2025:4508. The advisories include package names and versions for patched libsoup packages. Applying these updates will remediate the heap buffer overflow in sniff_unknown() and other related vulnerabilities. Patch status is confirmed and official fixes are available.