Files
CVEs-PoC/2025/CVE-2025-0725.md
T
2025-09-29 21:09:30 +02:00

15 KiB

CVE-2025-0725

Description

When libcurl is asked to perform automatic gzip decompression ofcontent-encoded HTTP responses with the CURLOPT_ACCEPT_ENCODING option,using zlib 1.2.0.3 or older, an attacker-controlled integer overflow wouldmake libcurl perform a buffer overflow.

POC

Reference

No PoCs from references.

Github