CVE-2025-58186 is a vulnerability where an HTTP server does not limit the number of cookies parsed, despite HTTP headers having a default size limit of 1MB. An attacker can exploit this by sending many small cookies, causing excessive memory allocation on the server and resulting in large memory consumption.