CVE-2025-53629
BaseFortify
Publication date: 2025-07-10
Last updated on: 2025-08-06
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| yhirose | cpp-httplib | to 0.23.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-770 | The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the cpp-httplib library versions prior to 0.23.0. It allows an attacker to send incoming HTTP requests with the header 'Transfer-Encoding: chunked' that can cause the server to allocate memory arbitrarily. This can lead to the server's memory being exhausted.
How can this vulnerability impact me? :
The vulnerability can lead to denial of service by exhausting the server's memory, potentially causing the server to crash or become unresponsive.
What immediate steps should I take to mitigate this vulnerability?
Upgrade cpp-httplib to version 0.23.0 or later, as this version contains the fix for the vulnerability related to arbitrary memory allocation from Transfer-Encoding: chunked headers.