Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-11021

Опубликовано: 26 сент. 2025
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

EPSS

Процентиль: 14%
0.00046
Низкий

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 месяца назад

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

msrc
около 1 месяца назад

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

CVSS3: 7.5
debian
около 1 месяца назад

A flaw was found in the cookie date handling logic of the libsoup HTTP ...

suse-cvrf
15 дней назад

Security update for libsoup

suse-cvrf
15 дней назад

Security update for libsoup

EPSS

Процентиль: 14%
0.00046
Низкий

7.5 High

CVSS3

Дефекты

CWE-125