Wind River Support Network

HomeDefectsLIN1024-8417

Fixed

LIN1024-8417 : Security Advisory - libsoup&libsoup-2.4 - CVE-2025-32049

Created: Apr 6, 2025 Updated: Mar 24, 2026

Resolved Date: Mar 23, 2026

Found In Version: 10.24.33.1

Fix Version: 10.24.33.16

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Userspace

Description

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS).

CVEs

CVE-2025-32049