CVE-2025-0725

gzip integer overflow

Published Feb 5, 2025 CVSS 3.1 · 7.3 High EPSS 1.8% KEV · Not listed
Description
When libcurl is asked to perform automatic gzip decompression of
content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,
**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would
make libcurl perform a buffer overflow.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-1837 When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00215}

epss

{'score': 0.0023}

Type Values Removed Values Added
First Time appeared Zlib
Zlib zlib
CPEs cpe:2.3:a:zlib:zlib:*:*:*:*:*:*:*:*
Vendors & Products Zlib
Zlib zlib
Type Values Removed Values Added
First Time appeared Haxx
Haxx curl
Haxx libcurl
Netapp
Netapp hci Baseboard Management Controller
Netapp hci H610c
Netapp hci H610c Firmware
Netapp hci H610s
Netapp hci H610s Firmware
Netapp hci H615c
Netapp hci H615c Firmware
Netapp solidfire \& Hci Management Node
Netapp solidfire \& Hci Storage Node
Weaknesses CWE-120
CPEs cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*
cpe:2.3:a:netapp:hci_baseboard_management_controller:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire_\&_hci_storage_node:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_h610c:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_h610s:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_h615c:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:hci_h610c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:hci_h610s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:hci_h615c_firmware:-:*:*:*:*:*:*:*
Vendors & Products Haxx
Haxx curl
Haxx libcurl
Netapp
Netapp hci Baseboard Management Controller
Netapp hci H610c
Netapp hci H610c Firmware
Netapp hci H610s
Netapp hci H610s Firmware
Netapp hci H615c
Netapp hci H615c Firmware
Netapp solidfire \& Hci Management Node
Netapp solidfire \& Hci Storage Node
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.
Title gzip integer overflow
References