What’s Vulnerable › Vulnerabilities

CVE-2025-0725: gzip integer overflow

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-02-05 · updated 2026-10-15
• Weakness: CWE-120

Description

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

Affected products

• curl: from 7.10.5 before 8.12.0 — fixed in 8.12.0
• curl: from 7.10.5 before 8.12.0 — fixed in 8.12.0
• NetApp Hci Baseboard Management Controller: all versions
• NetApp Hci H610C Firmware: all versions
• NetApp HCI Baseboard Management Controller (BMC) HCI H610C, NetApp HCI Baseboard Management Controller (BMC) HCI H615C, : all versions
• NetApp Hci H615C Firmware: all versions
• NetApp Solidfire & Hci Management Node: all versions
• NetApp Solidfire & Hci Storage Node: all versions

How to fix

Upgrade to a fixed version: curl 8.12.0; curl 8.12.0. Check the vendor advisory for mitigations.

References

• https://curl.se/docs/CVE-2025-0725.html
• https://curl.se/docs/CVE-2025-0725.json
• https://hackerone.com/reports/2956023
• http://www.openwall.com/lists/oss-security/2025/02/05/3
• http://www.openwall.com/lists/oss-security/2025/02/06/2
• http://www.openwall.com/lists/oss-security/2025/02/06/4
• https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7
• https://security.netapp.com/advisory/ntap-20250306-0009/
• https://cert-portal.siemens.com/productcert/html/ssa-089022.html
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Get alerted when CVE-2025-0725 or the next vulnerability affects your stack