Wind River Support Network

HomeDefectsLIN1022-14689

Fixed

LIN1022-14689 : Security Advisory - libsoup&libsoup-2.4 - CVE-2025-32049

Created: Apr 6, 2025 Updated: Jun 8, 2026

Resolved Date: May 25, 2026

Found In Version: 10.22.33.1

Fix Version: 10.22.33.24

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS).

CVEs

CVE-2025-32049