VDB
CVE-2025-53629
CVE-2025-53629
PUBLISHED
CVSS 7.5 HIGH
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: This vulnerability is related to CVE-2025-53628.
EPSS 0.59% · 47.8th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.59%
47.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| yhirose | cpp-httplib | *, 0 |
Timeline
- Jan 21, 1970 Security Advisory
- Jul 10, 2025 CVE Published
- Jul 10, 2025 PoC Published
- Jul 11, 2025 EPSS Score
- Jul 11, 2025 Coalition ESS Score
- Jul 16, 2025 Coalition ESS Score
- Jul 21, 2025 EPSS Score
- Aug 1, 2025 EPSS Score
- Aug 1, 2025 Coalition ESS Score
- Aug 6, 2025 Coalition ESS Score
- Aug 11, 2025 EPSS Score
- Aug 21, 2025 EPSS Score