CVE-2025-0725

ADVISORY - nist

Summary

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the CURLOPT_ACCEPT_ENCODING option, using zlib 1.2.0.3 or older, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

EPSS Score⁠: 0.00738 (0.723)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-120⁠

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

ADVISORY - redhat

CWE-680⁠

Integer Overflow to Buffer Overflow

Impacted images

Advisories

NIST

CREATED

11 months ago

UPDATED

7 months ago

ADVISORY IDCVE-2025-0725⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-120⁠

CVSS SCORE

7.3high

Alpine

CREATED

11 months ago

UPDATED

2 months ago

ADVISORY IDCVE-2025-0725⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

11 months ago

UPDATED

10 days ago

ADVISORY IDCVE-2025-0725⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

11 months ago

UPDATED

10 months ago

ADVISORY IDCVE-2025-0725⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Amazon

CREATED

9 days ago

UPDATED

9 days ago

ADVISORY IDALAS2023-2025-1357⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Red Hat

CREATED

11 months ago

UPDATED

3 days ago

ADVISORY IDCVE-2025-0725⁠

EXPLOITABILITY SCORE

2.5

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-680⁠

CVSS SCORE

4low

Chainguard

CREATED

2 days ago

UPDATED

2 days ago

ADVISORY ID

CGA-25q2-2hvj-grx8

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Chainguard

CREATED

11 months ago

UPDATED

11 months ago

ADVISORY ID

CGA-378j-cghq-mmhg

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Photon

CREATED

2 months ago

UPDATED

2 months ago

ADVISORY ID

CVE-2025-0725

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.3high

minimos

CREATED

9 months ago

UPDATED

9 months ago

ADVISORY ID

MINI-xw4j-54fj-c8q9

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY