CVE-2025-53628: cpp-httplib does not limit the length of a line

Q: What is the severity of CVE-2025-53628?

The severity of CVE-2025-53628 is considered to be high due to its impact on memory allocation, which can be exploited by attackers.

Q: How do I fix CVE-2025-53628?

To fix CVE-2025-53628, update cpp-httplib to version 0.20.1 or later.

Q: What versions are affected by CVE-2025-53628?

CVE-2025-53628 affects all versions of cpp-httplib prior to 0.20.1.

Q: What type of vulnerability is CVE-2025-53628?

CVE-2025-53628 is a memory allocation vulnerability that allows attackers to allocate memory arbitrarily.

Q: Can CVE-2025-53628 lead to exploitation?

Yes, CVE-2025-53628 can potentially lead to exploitation, allowing attackers to perform malicious actions by manipulating memory.

Published Jul 10, 2025

Updated

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not have a limit for a unique line, permitting an attacker to explore this to allocate memory arbitrarily. This vulnerability is fixed in 0.20.1. NOTE: This vulnerability is related to CVE-2025-53629.

Affected Software

2 affected components

cpp-httplib cpp-httplib<0.20.1

Yhirose Cpp-httplib<0.20.1

Remediation

Patch Available

https://github.com/yhirose/cpp-httplib/commit/7b752106ac42bd5b907793950d9125a0972c8e8e

Event History

Jul 10, 2025

CVE Published

via MITRE·07:45 PM

Data Sourced

via MITRE·07:45 PM

DescriptionWeakness

Data Sourced

via NVD·08:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-53628?

The severity of CVE-2025-53628 is considered to be high due to its impact on memory allocation, which can be exploited by attackers.

How do I fix CVE-2025-53628?