CVE-2025-53629: cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: This vulnerability is related to CVE-2025-53628.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53629?
CVE-2025-53629 has a severity level that can potentially lead to memory exhaustion on affected servers.
How do I fix CVE-2025-53629?
To fix CVE-2025-53629, you should upgrade to version 0.23.0 or later of the cpp-httplib library.
Which versions of cpp-httplib are affected by CVE-2025-53629?
CVE-2025-53629 affects all versions of cpp-httplib prior to 0.23.0.
What type of vulnerability is CVE-2025-53629?
CVE-2025-53629 is a memory allocation vulnerability that arises from handling chunked Transfer-Encoding requests.
What are the potential consequences of CVE-2025-53629?
The potential consequences of CVE-2025-53629 include server memory exhaustion, which may lead to denial-of-service conditions.