Home / CVE DB / CVE-2025-0725
Standard
Vulnerability Identifier

CVE-2025-0725

2025-02-05
Severity Assessment
7.3
HIGH
CVSS v3.x Score
Clinical Analysis (Description)

When libcurl is asked to perform automatic gzip decompression of
content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,
**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would
make libcurl perform a buffer overflow.

Vector Sequencing

Attack Parameters

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Impact Consequences

Technical Impact

Unchanged
Scope
Low
Confidentiality
Low
Integrity
Low
Availability
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness Classification

CWE-CWE-120

Affected Population

Affected Configurations

Total: 326 detected entries

Software List Scrollable
ha
curl
Vendor: haxx • v7.19.5
ne
solidfire_\&_hci_management_node
Vendor: netapp • v-
ha
curl
Vendor: haxx • v7.80.0
ha
curl
Vendor: haxx • v8.2.0
ha
curl
Vendor: haxx • v7.17.1
ha
libcurl
Vendor: haxx • v7.42.0
ha
curl
Vendor: haxx • v7.15.4
ha
libcurl
Vendor: haxx • v7.42
ha
curl
Vendor: haxx • v7.16.3
ha
libcurl
Vendor: haxx • v7.59.0
ha
libcurl
Vendor: haxx • v7.83.1
ha
curl
Vendor: haxx • v7.15.5
ha
curl
Vendor: haxx • v7.53.0
ha
curl
Vendor: haxx • v7.21.2
ha
curl
Vendor: haxx • v7.51.0
ne
hci_h610s_firmware
Vendor: netapp • v-
ha
libcurl
Vendor: haxx • v7.84.0
ha
libcurl
Vendor: haxx • v7.12.0
ha
curl
Vendor: haxx • v7.14.0
ha
libcurl
Vendor: haxx • v7.75.0
ha
libcurl
Vendor: haxx • v7.21.5
ha
libcurl
Vendor: haxx • v7.87.0
ha
curl
Vendor: haxx • v8.7.0
ha
curl
Vendor: haxx • v7.48.0
ha
libcurl
Vendor: haxx • v7.19.3
ha
curl
Vendor: haxx • v7.21.4
ha
curl
Vendor: haxx • v7.19.7-53
ha
libcurl
Vendor: haxx • v7.12.3
ha
libcurl
Vendor: haxx • v8.7.0
ha
curl
Vendor: haxx • v7.52.1
ha
libcurl
Vendor: haxx • v7.65.0
ha
curl
Vendor: haxx • v8.2.1
ha
libcurl
Vendor: haxx • v8.9.0
ha
curl
Vendor: haxx • v7.50.0
ha
curl
Vendor: haxx • v8.0.0
ha
curl
Vendor: haxx • v7.64.0
ha
curl
Vendor: haxx • v7.10.7
ha
libcurl
Vendor: haxx • v7.21.2
ha
libcurl
Vendor: haxx • v7.11.2
ha
libcurl
Vendor: haxx • v7.33.0
ha
libcurl
Vendor: haxx • v8.0.1
ha
libcurl
Vendor: haxx • v7.71.1
ha
curl
Vendor: haxx • v7.65.0
ha
libcurl
Vendor: haxx • v7.69.0
ha
libcurl
Vendor: haxx • v7.17.0
ha
libcurl
Vendor: haxx • v7.15.2
ha
curl
Vendor: haxx • v7.63.0
ha
curl
Vendor: haxx • v7.88.1
ha
curl
Vendor: haxx • v7.37.1
ha
curl
Vendor: haxx • v7.24.0
ha
curl
Vendor: haxx • v7.79.1
ha
libcurl
Vendor: haxx • v7.21.0
ha
libcurl
Vendor: haxx • v8.2.0
ha
curl
Vendor: haxx • v7.13.0
ha
libcurl
Vendor: haxx • v7.28.1
ha
libcurl
Vendor: haxx • v7.19.5
ha
curl
Vendor: haxx • v7.28.1
ha
libcurl
Vendor: haxx • v8.4.0
ha
libcurl
Vendor: haxx • v7.16.3
ha
curl
Vendor: haxx • v7.21.1
ha
libcurl
Vendor: haxx • v7.10.8
ha
curl
Vendor: haxx • v7.33.0
ha
libcurl
Vendor: haxx • v7.23.1
ha
curl
Vendor: haxx • v7.12.0
ha
curl
Vendor: haxx • v7.13.2
ha
libcurl
Vendor: haxx • v7.21.3
ha
curl
Vendor: haxx • v7.77.0
ha
libcurl
Vendor: haxx • v7.19.2
ha
curl
Vendor: haxx • v7.49.0
ha
libcurl
Vendor: haxx • v7.14.0
ha
libcurl
Vendor: haxx • v7.80.0
ha
curl
Vendor: haxx • v7.19.0
ha
libcurl
Vendor: haxx • v7.63.0
ha
curl
Vendor: haxx • v8.0.1
ha
curl
Vendor: haxx • v7.21.6
ha
libcurl
Vendor: haxx • v7.51.0
ha
libcurl
Vendor: haxx • v7.55.0
ha
libcurl
Vendor: haxx • v7.79.0
ha
libcurl
Vendor: haxx • v7.19.0
ha
libcurl
Vendor: haxx • v8.3.0
ha
curl
Vendor: haxx • v7.50.1
ha
libcurl
Vendor: haxx • v7.64.0
ha
curl
Vendor: haxx • v7.42.0
ha
curl
Vendor: haxx • v7.65.3
ha
libcurl
Vendor: haxx • v7.24.0
ha
curl
Vendor: haxx • v7.84.0
ha
curl
Vendor: haxx • v7.82.0
ha
libcurl
Vendor: haxx • v7.29.0
ha
curl
Vendor: haxx • v7.12.3
ha
curl
Vendor: haxx • v7.18.2
ha
curl
Vendor: haxx • v7.50.3
ha
curl
Vendor: haxx • v7.15.2
ha
curl
Vendor: haxx • v8.4.0
ha
libcurl
Vendor: haxx • v7.55.1
ha
libcurl
Vendor: haxx • v7.13.2
ha
curl
Vendor: haxx • v7.21.5
ha
libcurl
Vendor: haxx • v7.64.1
ha
libcurl
Vendor: haxx • v7.52.1
ha
libcurl
Vendor: haxx • v7.88.0
ha
curl
Vendor: haxx • v7.10.6
ha
curl
Vendor: haxx • v8.5.0
ha
curl
Vendor: haxx • v7.11.2
ha
libcurl
Vendor: haxx • v7.21.4
ha
curl
Vendor: haxx • v7.11.1
ha
curl
Vendor: haxx • v7.15.3
ha
curl
Vendor: haxx • v7.74.0
ha
curl
Vendor: haxx • v7.31.0
ha
libcurl
Vendor: haxx • v7.50.0
ha
curl
Vendor: haxx • v7.21.0
ha
libcurl
Vendor: haxx • v7.54.1
ha
curl
Vendor: haxx • v8.10.0
ha
libcurl
Vendor: haxx • v7.69.1
ha
curl
Vendor: haxx • v7.29.0
ha
libcurl
Vendor: haxx • v7.11.1
ha
curl
Vendor: haxx • v7.18.1
ha
curl
Vendor: haxx • v7.43.0
ha
curl
Vendor: haxx • v7.55.1
ha
libcurl
Vendor: haxx • v7.77.0
ha
curl
Vendor: haxx • v7.54.0
ha
curl
Vendor: haxx • v7.75.0
ha
curl
Vendor: haxx • v7.14.1
ha
curl
Vendor: haxx • v7.69.1
ha
curl
Vendor: haxx • v8.1.1
ha
curl
Vendor: haxx • v7.26.0
ha
curl
Vendor: haxx • v7.47.1
ha
curl
Vendor: haxx • v7.59.0
ha
curl
Vendor: haxx • v7.34.0
ha
curl
Vendor: haxx • v7.70.0
ha
libcurl
Vendor: haxx • v7.10.5
ha
libcurl
Vendor: haxx • v7.68.0
ha
curl
Vendor: haxx • v7.87.0
ha
libcurl
Vendor: haxx • v7.73.0
ha
curl
Vendor: haxx • v7.41.0
ne
hci_h610c_firmware
Vendor: netapp • v-
ha
libcurl
Vendor: haxx • v7.78.0
ha
libcurl
Vendor: haxx • v7.72.0
ha
libcurl
Vendor: haxx • v7.18.1
ha
libcurl
Vendor: haxx • v7.79.1
ne
solidfire_\&_hci_storage_node
Vendor: netapp • v-
ha
libcurl
Vendor: haxx • v7.83.0
ha
libcurl
Vendor: haxx • v7.53.1
ha
libcurl
Vendor: haxx • v7.67.0
ha
curl
Vendor: haxx • v7.69.0
ha
libcurl
Vendor: haxx • v7.46.0
ha
libcurl
Vendor: haxx • v7.65.3
ha
curl
Vendor: haxx • v7.61.1
ha
curl
Vendor: haxx • v7.52.0
ha
libcurl
Vendor: haxx • v7.15.4
ha
libcurl
Vendor: haxx • v7.54.0
ha
curl
Vendor: haxx • v7.19.1
ha
libcurl
Vendor: haxx • v7.15.5
ha
curl
Vendor: haxx • v7.16.0
ha
curl
Vendor: haxx • v7.44.0
ha
libcurl
Vendor: haxx • v7.61.0
ha
libcurl
Vendor: haxx • v7.21.1
ne
hci_baseboard_management_controller
Vendor: netapp • v-
ha
libcurl
Vendor: haxx • v7.12.1
ha
curl
Vendor: haxx • v7.19.4
ha
libcurl
Vendor: haxx • v7.40.0
ha
libcurl
Vendor: haxx • v7.22.0
ha
libcurl
Vendor: haxx • v7.56.1
ha
curl
Vendor: haxx • v7.17.0
ha
libcurl
Vendor: haxx • v7.49.0
ha
libcurl
Vendor: haxx • v7.13.0
ha
curl
Vendor: haxx • v7.56.0
ha
libcurl
Vendor: haxx • v7.41.0
ha
curl
Vendor: haxx • v7.10.8
ha
curl
Vendor: haxx • v7.13.1
ha
libcurl
Vendor: haxx • v7.71.0
ha
libcurl
Vendor: haxx • v7.10.7
ha
libcurl
Vendor: haxx • v7.39.0
ha
curl
Vendor: haxx • v7.15.0
ha
curl
Vendor: haxx • v7.12.2
ha
libcurl
Vendor: haxx • v7.70.0
ne
hci_h615c_firmware
Vendor: netapp • v-
ha
curl
Vendor: haxx • v7.37.0
ha
curl
Vendor: haxx • v7.68.0
ha
libcurl
Vendor: haxx • v7.19.4
ha
libcurl
Vendor: haxx • v7.15.0
ha
curl
Vendor: haxx • v7.56.1
ha
curl
Vendor: haxx • v7.40.0
ha
libcurl
Vendor: haxx • v7.21.7
ha
curl
Vendor: haxx • v7.62.0
ha
libcurl
Vendor: haxx • v7.20.0
ha
curl
Vendor: haxx • v7.76.1
ha
libcurl
Vendor: haxx • v7.19.1
ha
libcurl
Vendor: haxx • v7.37.0
ha
libcurl
Vendor: haxx • v7.44.0
ha
libcurl
Vendor: haxx • v7.56.0
ha
curl
Vendor: haxx • v7.66.0
ha
curl
Vendor: haxx • v7.23.1
ha
curl
Vendor: haxx • v7.72.0
ha
libcurl
Vendor: haxx • v7.50.1
ha
libcurl
Vendor: haxx • v7.42.1
ha
libcurl
Vendor: haxx • v7.38.0
ha
libcurl
Vendor: haxx • v7.86.0
ha
libcurl
Vendor: haxx • v7.15.3
ha
libcurl
Vendor: haxx • v7.12.2
ha
curl
Vendor: haxx • v7.55.0
ha
curl
Vendor: haxx • v7.45.0
ha
libcurl
Vendor: haxx • v7.57.0
ha
curl
Vendor: haxx • v8.1.0
ha
curl
Vendor: haxx • v7.21.3
ha
libcurl
Vendor: haxx • v7.26.0
ha
curl
Vendor: haxx • v7.81.0
ha
libcurl
Vendor: haxx • v7.88.1
ha
libcurl
Vendor: haxx • v7.16.2
ha
libcurl
Vendor: haxx • v7.18.0
ha
curl
Vendor: haxx • v7.47.0
ha
curl
Vendor: haxx • v7.85.0
ha
libcurl
Vendor: haxx • v7.60.0
ha
curl
Vendor: haxx • v7.19.7
ha
curl
Vendor: haxx • v7.11.0
ha
libcurl
Vendor: haxx • v7.17.1
ha
libcurl
Vendor: haxx • v8.1.0
ha
curl
Vendor: haxx • v7.28.0
ha
libcurl
Vendor: haxx • v7.28.0
ha
curl
Vendor: haxx • v7.67.0
ha
libcurl
Vendor: haxx • v7.43.0
ha
libcurl
Vendor: haxx • v7.20.1
ha
curl
Vendor: haxx • v7.15.1
ha
curl
Vendor: haxx • v7.88.0
ha
curl
Vendor: haxx • v7.65.1
ha
libcurl
Vendor: haxx • v7.39
ha
curl
Vendor: haxx • v8.8.0
ha
libcurl
Vendor: haxx • v7.14.1
ha
libcurl
Vendor: haxx • v7.11.0
ha
curl
Vendor: haxx • v7.79.0
ha
libcurl
Vendor: haxx • v7.45.0
ha
libcurl
Vendor: haxx • v7.15.1
ha
curl
Vendor: haxx • v7.57.0
ha
curl
Vendor: haxx • v8.9.0
ha
curl
Vendor: haxx • v7.30.0
ha
libcurl
Vendor: haxx • v7.47.0
ha
libcurl
Vendor: haxx • v8.8.0
ha
libcurl
Vendor: haxx • v7.48.0
ha
curl
Vendor: haxx • v7.54.1
ha
curl
Vendor: haxx • v8.7.1
ha
curl
Vendor: haxx • v7.73.0
ha
curl
Vendor: haxx • v7.18.0
ha
curl
Vendor: haxx • v7.60.0
ha
curl
Vendor: haxx • v7.12.1
ha
curl
Vendor: haxx • v8.6.0
ha
curl
Vendor: haxx • v8.1.2
ha
libcurl
Vendor: haxx • v7.61.1
ha
libcurl
Vendor: haxx • v7.65.2
ha
curl
Vendor: haxx • v7.76.0
ha
curl
Vendor: haxx • v7.19.3
ha
curl
Vendor: haxx • v8.9.1
ha
curl
Vendor: haxx • v7.10.5
ha
libcurl
Vendor: haxx • v7.19.6
ha
curl
Vendor: haxx • v7.42.1
ha
libcurl
Vendor: haxx • v7.82.0
ha
libcurl
Vendor: haxx • v7.30.0
ha
curl
Vendor: haxx • v7.50.2
ha
curl
Vendor: haxx • v7.35.0
ha
curl
Vendor: haxx • v7.20.1
ha
libcurl
Vendor: haxx • v8.5.0
ha
libcurl
Vendor: haxx • v7.32.0
ha
libcurl
Vendor: haxx • v7.23.0
ha
libcurl
Vendor: haxx • v7.31.0
ha
libcurl
Vendor: haxx • v7.74.0
ha
libcurl
Vendor: haxx • v8.7.1
ha
libcurl
Vendor: haxx • v7.10.6
ha
libcurl
Vendor: haxx • v8.6.0
ha
libcurl
Vendor: haxx • v7.52.0
ha
curl
Vendor: haxx • v7.64.1
ha
libcurl
Vendor: haxx • v7.50.2
ha
curl
Vendor: haxx • v8.11.1
ha
curl
Vendor: haxx • v7.86.0
ha
libcurl
Vendor: haxx • v7.36.0
ha
curl
Vendor: haxx • v7.20.0
ha
libcurl
Vendor: haxx • v7.53.0
ha
libcurl
Vendor: haxx • v7.16.0
ha
libcurl
Vendor: haxx • v7.18.2
ha
curl
Vendor: haxx • v7.32.0
ha
libcurl
Vendor: haxx • v7.49.1
ha
curl
Vendor: haxx • v8.11.0
ha
libcurl
Vendor: haxx • v7.58.0
ha
curl
Vendor: haxx • v7.22.0
ha
libcurl
Vendor: haxx • v7.27.0
ha
curl
Vendor: haxx • v7.21.7
ha
libcurl
Vendor: haxx • v7.13.1
ha
libcurl
Vendor: haxx • v7.47.1
ha
curl
Vendor: haxx • v7.65.2
ha
libcurl
Vendor: haxx • v7.65.1
ha
curl
Vendor: haxx • v7.27.0
ha
curl
Vendor: haxx • v7.25.0
ha
libcurl
Vendor: haxx • v7.34.0
ha
libcurl
Vendor: haxx • v8.1.1
ha
libcurl
Vendor: haxx • v7.81.0
ha
libcurl
Vendor: haxx • v7.85.0
ha
curl
Vendor: haxx • v7.19.2
ha
curl
Vendor: haxx • v7.36.0
ha
libcurl
Vendor: haxx • v7.35.0
ha
curl
Vendor: haxx • v7.58.0
ha
curl
Vendor: haxx • v7.78.0
ha
curl
Vendor: haxx • v7.46.0
ha
curl
Vendor: haxx • v7.71.1
ha
libcurl
Vendor: haxx • v8.1.2
ha
curl
Vendor: haxx • v7.49.1
ha
libcurl
Vendor: haxx • v7.25.0
ha
libcurl
Vendor: haxx • v7.16.4
ha
curl
Vendor: haxx • v7.71.0
ha
curl
Vendor: haxx • v7.39.0
ha
curl
Vendor: haxx • v7.19.6
ha
curl
Vendor: haxx • v7.53.1
ha
libcurl
Vendor: haxx • v7.62.0
ha
curl
Vendor: haxx • v7.16.1
ha
curl
Vendor: haxx • v8.10.1
ha
curl
Vendor: haxx • v7.83.0
ha
libcurl
Vendor: haxx • v8.2.1
ha
curl
Vendor: haxx • v7.83.1
ha
curl
Vendor: haxx • v7.16.4
ha
curl
Vendor: haxx • v7.61.0
ha
libcurl
Vendor: haxx • v8.9.1
ha
libcurl
Vendor: haxx • v7.21.6
ha
libcurl
Vendor: haxx • v7.66.0
ha
curl
Vendor: haxx • v7.23.0
ha
libcurl
Vendor: haxx • v8.0.0
ha
libcurl
Vendor: haxx • v7.50.3
ha
curl
Vendor: haxx • v7.16.2
ha
curl
Vendor: haxx • v7.38.0
ha
libcurl
Vendor: haxx • v7.37.1
ha
libcurl
Vendor: haxx • v7.19.7
ha
libcurl
Vendor: haxx • v7.16.1
Timeline

Time Line

PUBLICATION
05 Feb 2025
MODIFICATION
27 Jun 2025
FIRST PATCH
21 Apr 2026
Impact Statistics

Key Metrics

CVSS Score
7.3
HIGH
Products
326
Affected
Patches
5
Available
Remediation Protocol

Recommended Solution

No automatic solution found. Check vendor references.
Recommended Actions for Administrators

Immediate Action Plan

1. Inventory

Identify all affected systems in your infrastructure.

2. Assessment

Assess exposure and criticality for your organization.

3. Mitigation

Apply patches or available workarounds.

4. Verification

Test and confirm effectiveness of applied measures.