CVE-2025-53629
cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: This vulnerability is related to CVE-2025-53628.
Reserved 2025-07-07 | Published 2025-07-10 | Updated 2025-07-10 | Assigner GitHub_MCWE-770: Allocation of Resources Without Limits or Throttling
github.com/...ttplib/security/advisories/GHSA-qjmq-h3cc-qv6w
github.com/...ttplib/security/advisories/GHSA-j6p8-779x-p5pw
github.com/...ommit/17ba303889b8d4d719be3879a70639ab653efb99
Support options
