Threats Tagged 'cve-2025-32906'

Multiple security vulnerabilities have been identified in libsoup3, an HTTP library used in GNOME applications for asynchronous HTTP access. These include heap buffer over-reads, out-of-bounds reads, denial of service via HTTP/2, NULL pointer dereference in Digest authentication handling, and information disclosure through improper Authorization header forwarding. Red Hat has issued an important security update addressing these issues in Red Hat Enterprise Linux 10 and related products.

This Red Hat security advisory addresses multiple vulnerabilities in the mingw-freetype library and libsoup components affecting Red Hat Enterprise Linux 8 and related products. The issues include out-of-bounds writes, integer overflows, heap buffer overflows, null pointer dereferences, double frees, and denial of service conditions. These vulnerabilities impact font parsing and HTTP request handling functionalities. Red Hat has released updated packages to fix these issues. The advisory rates the security impact as Important and provides detailed fixes for each vulnerability. No known exploits in the wild have been reported at this time.