CERT24CVE-2025-11021 — Out-of-Bounds Read in libsoup Cookie Date HandlingLoading data…
CERT24Threat Observatory
Period

CVE-2025-11021 — Out-of-Bounds Read in libsoup Cookie Date Handling

A flaw was found in the cookie date-handling logic of the libsoup HTTP library. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read, potentially causing unintended disclosure of memory contents from the process using libsoup.

← Back to intelligence

CVE-2025-11021 — Out-of-Bounds Read in libsoup Cookie Date Handling

A flaw was found in the cookie date-handling logic of the libsoup HTTP library. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read, potentially causing unintended disclosure of memory contents from the process using libsoup.