When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled inte…
High CVSS 7.3
Summary
When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
- :
- :
- :
- :
Sources
- NVD DATABASE
Original Links
- https://curl.se/docs/CVE-2025-0725.html Vendor Advisory
- https://curl.se/docs/CVE-2025-0725.json Vendor Advisory
- https://hackerone.com/reports/2956023 Exploit
- http://www.openwall.com/lists/oss-security/2025/02/05/3 Mailing List
- http://www.openwall.com/lists/oss-security/2025/02/06/2 Mailing List
- http://www.openwall.com/lists/oss-security/2025/02/06/4 Mailing List
- https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7 Patch
- https://security.netapp.com/advisory/ntap-20250306-0009/ Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-089022.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
Timeline
- nvd_ingest NVD