Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-53629

cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: This vulnerability is related to CVE-2025-53628.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

yhirose cpp-httplib

  • < 0.23.0affected

References