CVE-2025-0725

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

CVSS 3.1

7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-25)

CWE

CWE-120

Published

2025-02-05

Modified

2026-10-15

Record from

the NVD, synced 2026-10-19

Affected

• haxx:curl
• haxx:libcurl
• netapp:hci_baseboard_management_controller
• netapp:hci_h610c_firmware
• netapp:hci_h610s_firmware
• netapp:hci_h615c_firmware
• netapp:solidfire_\&_hci_management_node
• netapp:solidfire_\&_hci_storage_node

References

• https://curl.se/docs/CVE-2025-0725.html
• https://curl.se/docs/CVE-2025-0725.json
• https://hackerone.com/reports/2956023
• http://www.openwall.com/lists/oss-security/2025/02/05/3
• http://www.openwall.com/lists/oss-security/2025/02/06/2

Check your stackJSON