CVE-2025-55763: Buffer Overflow
Published Aug 29, 2025
·Updated
Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of service or arbitrary code execution.
Affected Software
2 affected components
CivetWeb CivetWeb>=1.14<=1.16
Civetweb Project Civetweb>=1.14<=1.16
Event History
Aug 29, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55763?
CVE-2025-55763 has a high severity due to its potential for remote code execution and heap memory corruption.
2
How do I fix CVE-2025-55763?
To fix CVE-2025-55763, upgrade CivetWeb to version 1.17 or later.
3
What products are affected by CVE-2025-55763?
CVE-2025-55763 affects CivetWeb versions 1.14 through 1.16.
4
Can CVE-2025-55763 be exploited remotely?
Yes, CVE-2025-55763 can be exploited remotely via a crafted HTTP request.
5
What type of vulnerability is CVE-2025-55763?
CVE-2025-55763 is a buffer overflow vulnerability in the URI parser of CivetWeb.