High
gzip integer overflow
Type: advisorySources: OSV
When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-0725
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 14:56 UTC · Revision 1
Source evidence
When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.
osv:CVE-2025-0725
Complete source record
{
"id": "a8582a83663de628af2d34f102addfd4eab488c05abf27736269c966b0b2b9e6",
"url": "https://osv.dev/vulnerability/CVE-2025-0725",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "gzip integer overflow",
"summary": "When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.",
"evidence": "osv:CVE-2025-0725",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2025-0725",
"aliases": [
"CURL-CVE-2025-0725",
"CVE-2025-0725"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/curl/curl",
"type": "GIT",
"events": [
{
"introduced": "95a4b8db680beeca879f39c161296d29e22138f1"
},
{
"fixed": "34cf9d54a46598c44938aa7598820484d7af7133"
},
{
"fixed": "76f83f0db23846e254d940ec7"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "7.10.5"
},
{
"fixed": "8.12.0"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "7.10.5"
},
{
"fixed": "8.12.0"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "76f83f0db23846e254d940ec7"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"7.10.5",
"7.10.6",
"7.10.7",
"7.10.8",
"7.11.0",
"7.11.1",
"7.11.2",
"7.12.0",
"7.12.1",
"7.12.2",
"7.12.3",
"7.13.0",
"7.13.1",
"7.13.2",
"7.14.0",
"7.14.1",
"7.15.0",
"7.15.1",
"7.15.2",
"7.15.3",
"7.15.4",
"7.15.5",
"7.16.0",
"7.16.1",
"7.16.2",
"7.16.3",
"7.16.4",
"7.17.0",
"7.17.1",
"7.18.0",
"7.18.1",
"7.18.2",
"7.19.0",
"7.19.1",
"7.19.2",
"7.19.3",
"7.19.4",
"7.19.5",
"7.19.6",
"7.19.7",
"7.20.0",
"7.20.1",
"7.21.0",
"7.21.1",
"7.21.2",
"7.21.3",
"7.21.4",
"7.21.5",
"7.21.6",
"7.21.7",
"7.22.0",
"7.23.0",
"7.23.1",
"7.24.0",
"7.25.0",
"7.26.0",
"7.27.0",
"7.28.0",
"7.28.1",
"7.29.0",
"7.30.0",
"7.31.0",
"7.32.0",
"7.33.0",
"7.34.0",
"7.35.0",
"7.36.0",
"7.37.0",
"7.37.1",
"7.38.0",
"7.39.0",
"7.40.0",
"7.41.0",
"7.42.0",
"7.42.1",
"7.43.0",
"7.44.0",
"7.45.0",
"7.46.0",
"7.47.0",
"7.47.1",
"7.48.0",
"7.49.0",
"7.49.1",
"7.50.0",
"7.50.1",
"7.50.2",
"7.50.3",
"7.51.0",
"7.52.0",
"7.52.1",
"7.53.0",
"7.53.1",
"7.54.0",
"7.54.1",
"7.55.0",
"7.55.1",
"7.56.0",
"7.56.1",
"7.57.0",
"7.58.0",
"7.59.0",
"7.60.0",
"7.61.0",
"7.61.1",
"7.62.0",
"7.63.0",
"7.64.0",
"7.64.1",
"7.65.0",
"7.65.1",
"7.65.2",
"7.65.3",
"7.66.0",
"7.67.0",
"7.68.0",
"7.69.0",
"7.69.1",
"7.70.0",
"7.71.0",
"7.71.1",
"7.72.0",
"7.73.0",
"7.74.0",
"7.75.0",
"7.76.0",
"7.76.1",
"7.77.0",
"7.78.0",
"7.79.0",
"7.79.1",
"7.80.0",
"7.81.0",
"7.82.0",
"7.83.0",
"7.83.1",
"7.84.0",
"7.85.0",
"7.86.0",
"7.87.0",
"7.88.0",
"7.88.1",
"8.0.0",
"8.0.1",
"8.1.0",
"8.1.1",
"8.1.2",
"8.10.0",
"8.10.1",
"8.11.0",
"8.11.1",
"8.2.0",
"8.2.1",
"8.3.0",
"8.4.0",
"8.5.0",
"8.6.0",
"8.7.0",
"8.7.1",
"8.8.0",
"8.9.0",
"8.9.1",
"curl-8_11_1",
"curl-8_11_0",
"curl-8_10_1",
"curl-8_10_0",
"curl-8_9_1",
"curl-8_9_0",
"curl-8_8_0",
"curl-8_7_1",
"curl-8_7_0",
"curl-8_6_0",
"curl-8_5_0",
"curl-8_4_0",
"curl-8_3_0",
"curl-8_2_1",
"curl-8_2_0",
"curl-8_1_2",
"curl-8_1_1",
"curl-8_1_0",
"curl-8_0_1",
"curl-8_0_0",
"curl-7_88_1",
"curl-7_88_0",
"curl-7_87_0",
"curl-7_86_0",
"curl-7_85_0",
"curl-7_84_0",
"curl-7_83_1",
"curl-7_83_0",
"curl-7_82_0",
"curl-7_81_0",
"curl-7_80_0",
"curl-7_79_1",
"curl-7_79_0",
"curl-7_78_0",
"curl-7_77_0",
"curl-7_76_1",
"curl-7_76_0",
"curl-7_75_0",
"curl-7_74_0",
"curl-7_73_0",
"curl-7_72_0",
"curl-7_71_1",
"curl-7_71_0",
"curl-7_70_0",
"curl-7_69_1",
"curl-7_69_0",
"curl-7_68_0",
"curl-7_67_0",
"curl-7_66_0",
"curl-7_65_3",
"curl-7_65_2",
"curl-7_65_1",
"curl-7_65_0",
"curl-7_64_1",
"curl-7_64_0",
"curl-7_63_0",
"curl-7_62_0",
"curl-7_61_1",
"curl-7_61_0",
"curl-7_60_0",
"curl-7_59_0",
"curl-7_58_0",
"curl-7_57_0",
"curl-7_56_1",
"curl-7_56_0",
"curl-7_55_1",
"curl-7_55_0",
"curl-7_54_1",
"curl-7_54_0",
"curl-7_53_1",
"curl-7_53_0",
"curl-7_52_1",
"curl-7_52_0",
"curl-7_51_0",
"curl-7_50_3",
"curl-7_50_2",
"curl-7_50_1",
"curl-7_50_0",
"curl-7_49_1",
"curl-7_49_0",
"curl-7_48_0",
"curl-7_47_1",
"curl-7_47_0",
"curl-7_46_0",
"curl-7_45_0",
"curl-7_44_0",
"curl-7_43_0",
"curl-7_42_0",
"curl-7_41_0",
"curl-7_40_0",
"curl-7_39_0",
"curl-7_38_0",
"curl-7_37_1",
"curl-7_37_0",
"curl-7_36_0",
"curl-7_35_0",
"curl-7_34_0",
"curl-7_33_0",
"curl-7_32_0",
"curl-7_31_0",
"curl-7_30_0",
"curl-7_29_0",
"curl-7_28_1",
"curl-7_28_0",
"curl-7_27_0",
"curl-7_26_0",
"curl-7_25_0",
"curl-7_23_1",
"curl-7_23_0",
"curl-7_22_0",
"curl-7_21_7",
"curl-7_21_6",
"curl-7_21_5",
"curl-7_21_4",
"curl-7_21_3",
"curl-7_21_2",
"curl-7_21_1",
"curl-7_21_0",
"curl-7_20_1",
"curl-7_20_0",
"curl-7_19_7",
"curl-7_19_6",
"curl-7_19_5",
"curl-7_19_4",
"curl-7_19_3",
"curl-7_19_2",
"curl-7_19_1",
"curl-7_19_0",
"curl-7_18_2",
"curl-7_18_1",
"curl-7_18_0",
"curl-7_17_1",
"curl-7_17_0",
"curl-7_17_0-preldapfix",
"curl-7_16_4",
"curl-7_16_3",
"curl-7_16_2",
"curl-7_16_1",
"curl-7_16_0",
"curl-7_15_6-prepipeline",
"curl-7_15_5",
"curl-7_15_4",
"curl-7_15_3",
"curl-7_15_2",
"curl-7_15_1",
"curl-7_15_0",
"curl-7_14_1",
"curl-7_14_0",
"curl-7_13_2",
"curl-7_13_1",
"before_ftp_statemachine",
"curl-7_13_0",
"curl-7_12_3",
"curl-7_12_2",
"curl-7_12_1",
"curl-7_12_0",
"curl-7_11_2",
"curl-7_11_1",
"curl-7_11_0",
"curl-7_10_8",
"curl-7_10_7",
"curl-7_10_6",
"curl-7_10_5"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0725.json"
}
}
],
"modified": "2026-10-28T02:30:29.929181018Z",
"provider": "osv",
"references": [
"https://cert-portal.siemens.com/productcert/html/ssa-089022.html",
"https://cert-portal.siemens.com/productcert/html/ssa-398330.html",
"https://curl.se/docs/CVE-2025-0725.html",
"https://curl.se/docs/CVE-2025-0725.json",
"https://hackerone.com/reports/2956023",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0725.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-0725",
"https://security.netapp.com/advisory/ntap-20250306-0009/",
"https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7"
],
"provider_metadata": {
"cna_assigner": "curl",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0725.json"
}
},
"related_cves": [
{
"value": "CVE-2025-0725",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 496583,
"published_at": "2025-02-05T09:18:20.468+00:00"
}