CVE-2025-0725

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

Affected products

Alt Linux, Debian, Red Os, Suse, Libcurl, Zlib

Netapp Hci Baseboard Management Controller

All versions

CVSS 3.1

7.3 HIGH

EPSS

1.2% (66th percentile)

Weakness

CWE-120

NVD status

Analyzed

Published

2025-02-05