NULL Pointer Dereference The advisory has been revoked - it doesn't affect any version of package libsoup  (opens in a new tab)


Threat Intelligence

EPSS
0.43% (36th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about NULL Pointer Dereference vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-CONAN-LIBSOUP-15952189
  • published9 Apr 2026
  • disclosed14 Apr 2025
  • creditUnknown

Introduced: 14 Apr 2025

CVE-2025-32910  (opens in a new tab)
CWE-476  (opens in a new tab)

Amendment

This was deemed not a vulnerability.

Overview

Affected versions of this package are vulnerable to NULL Pointer Dereference via the soup_auth_digest_authenticate process. An attacker can cause the application to crash by sending a crafted unauthorized response that omits the "realm" parameter.