Beveiligingsadvies

CVE-2025-0725

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-05 09:18:20
Laatst bijgewerkt 2025-06-12 16:04:29
Toegewezen door curl
CVSS-score 7.3
Status PUBLISHED

Beschrijving

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.