CVE-2025-11021 Libsoup: out-of-bounds read in cookie date handling of libsoup http library
An out-of-bounds read in libsoup's cookie date handling allows attackers to disclose sensitive memory contents from applications using the library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-11021?
CVE-2025-11021 is a high-severity vulnerability in Red Hat Enterprise Linux 10, published on 26 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup.
Weakness: CWE-125
Which versions are affected by CVE-2025-11021?
Linux distribution packages (23)
libsoup3-doc AlmaLinux:10 | All versions | 3.6.5-3.el10_0.7 |
libsoup3 Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.7 |
libsoup3-debuginfo Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.7 |
libsoup3-debugsource Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.7 |
libsoup3-devel Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.7 |
libsoup3-doc Red Hat:enterprise_linux:10.0 | All versions | 0:3.6.5-3.el10_0.7 |
libsoup3 Rocky Linux:10 | All versions | 0:3.6.5-3.el10_0.7 |
libsoup SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 3.0.4-150400.3.18.1 |
libsoup SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 3.0.4-150400.3.18.1 |
libsoup SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 3.0.4-150400.3.18.1 |
libsoup SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 3.0.4-150400.3.18.1 |
libsoup SUSE:Linux Enterprise Module for Basesystem 15 SP6 | All versions | 3.4.4-150600.3.18.1 |
libsoup SUSE:Linux Enterprise Module for Basesystem 15 SP7 | All versions | 3.4.4-150600.3.18.1 |
libsoup SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 3.0.4-150400.3.18.1 |
libsoup SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 3.0.4-150400.3.18.1 |
libsoup SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 3.0.4-150400.3.18.1 |
libsoup SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 3.0.4-150400.3.18.1 |
libsoup SUSE:Linux Micro 6.0 | All versions | 3.4.2-9.1 |
libsoup SUSE:Linux Micro 6.1 | All versions | 3.4.4-slfo.1.1_5.1 |
libsoup SUSE:Manager Proxy LTS 4.3 | All versions | 3.0.4-150400.3.18.1 |
libsoup SUSE:Manager Server LTS 4.3 | All versions | 3.0.4-150400.3.18.1 |
libsoup openSUSE:Leap 15.6 | All versions | 3.4.4-150600.3.18.1 |
libsoup openSUSE:Tumbleweed | All versions | 3.6.5-7.1 |
How do I fix CVE-2025-11021?
Apply the vendor's patch.
Is CVE-2025-11021 being exploited?
There is no known exploitation of CVE-2025-11021 in the wild and no public exploit code.
Sources
Also known as ALSA-2025:18183, AZL-67860, AZL-67875, DEBIAN-CVE-2025-11021, ECHO-692b-622b-7965, GHSA-fjfx-vwp2-gqr8 and 9 more.