CVE-2025-53629

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: This vulnerability is related to CVE-2025-53628.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.51% chance of exploitation in the next 30 days, 41th percentile

Published

2025-07-10

Proof-of-concept exploits (1)

• yhirose/cpp-httplib/security/advisories/GHSA-qjmq-h3cc-qv6w

References

• CVE Record
• NVD entry

Related

• CVE-2020-11709
• CVE-2020-23914
• CVE-2020-23915
• CVE-2025-46728
• CVE-2025-53628
• CVE-2025-5363