CVE-2025-32907 — Libsoup: denial of service in server when client requests a large amount of overlapping ranges with range header
A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same ra…
Published: 2025-04-14 · CVSS: 5.3 · CVSS 3.1
A flaw was found in libsoup. The implementation of HTTP range requests is vulnerable to a resource consumption attack. This flaw allows a malicious client to request the same range many times in a single HTTP request, causing the server to use large amounts of memory. This does not allow for a full denial of service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7