Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-11021

Опубликовано: 26 сент. 2025
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

EPSS

Процентиль: 20%
0.00062
Низкий

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.5
ubuntu
3 месяца назад

A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.

msrc
3 месяца назад

Libsoup: out-of-bounds read in cookie date handling of libsoup http library

CVSS3: 7.5
debian
3 месяца назад

A flaw was found in the cookie date handling logic of the libsoup HTTP ...

suse-cvrf
2 месяца назад

Security update for libsoup

suse-cvrf
2 месяца назад

Security update for libsoup

EPSS

Процентиль: 20%
0.00062
Низкий

7.5 High

CVSS3

Дефекты

CWE-125