CVE-2025-0725

HIGH Year: 2025
CVSS v3 Score
7.3
High
Weakness Type
CWE-120
View all →

Vulnerability Description

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

Related Vulnerabilities

CVE-2021-31844

HIGH
CVSS:7.3(High)

A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated privileges through placing c...

CWE-1202021

CVE-2021-31845

HIGH
CVSS:7.3(High)

A buffer overflow vulnerability in McAfee Data Loss Prevention (DLP) Discover prior to 11.6.100 allows an attacker in the same network as the DLP Discover to execute arbitrary code through placing car...

CWE-1202021

CVE-2021-34423

HIGH
CVSS:7.3(High)

A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and ...

CWE-1202021

CVE-2024-25724

HIGH
CVSS:7.3(High)

In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Recording Service, Queuing Service, and Cloud Discovery Service allows attackers to...

CWE-1202024

CVE-2024-27619

HIGH
CVSS:7.3(High)

Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server can write directly to ram causing buffer overflow if file or files uploaded are gr...

CWE-1202024

CVE-2024-32664

HIGH
CVSS:7.3(High)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, specially crafted traffic or datasets can cause a limit...

CWE-1202024