High severity · published Feb 5, 2025
CVE-2025-0725
gzip integer overflow
7.3
CVSS
1.8%
EPSS
No
On KEV
Description
When libcurl is asked to perform automatic gzip decompression of
content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,
**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would
make libcurl perform a buffer overflow.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
curl · curl
8.11.1 through 8.11.1; 8.11.0 through 8.11.0; 8.10.1 through 8.10.1; 8.10.0 through 8.10.0; 8.9.1 through 8.9.1; 8.9.0 through 8.9.0; +34 more · source: vendor, NVD
HB
Hci Baseboard Management Controller · Netapp
All versions, or not specified · source: NVD
HH
Hci H610c Firmware · Netapp
All versions, or not specified · source: NVD
HH
Hci H610s Firmware · Netapp
All versions, or not specified · source: NVD
HH
Hci H615c Firmware · Netapp
All versions, or not specified · source: NVD
LI
Libcurl · Haxx
7.10.5 before 8.12.0 · source: NVD
SH
Solidfire & Hci Management Node · Netapp
All versions, or not specified · source: NVD
SH
Solidfire & Hci Storage Node · Netapp
All versions, or not specified · source: NVD
RR
RUGGEDCOM RST2428P · Siemens
before V3.3 · source: CISA
SX
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family · Siemens
before V3.3 · source: CISA
SX
SCALANCE XCH328 · Siemens
before V3.3 · source: CISA
SX
SCALANCE XCM324 · Siemens
before V3.3 · source: CISA
In the news
VulnerabilityHigh
Siemens SINEC OS
View CSAF
Summary
SINEC OS before V3.3 contains third-party components with multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.
The following versions of Siemens SINEC OS are affected:
RUGGEDCOM RST2428P (6GK6242-6PA00) vers:intdot/<3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725, CVE-2025-1390, CVE-2025-3360, CVE-2025-4138, CVE-2025-4330, CVE-2025-4373, CVE-2025-4435, CVE-2025-4516, CVE-2025-4517, CVE-2025-6141, CVE-2025-9086, CVE-2025-9230, CVE-2025-9231, CVE-2025-9232, CVE-2025-10148, CVE-2025-27587, CVE-2025-32433, CVE-2025-38084, CVE-2025-38085, CVE-2025-38086, CVE-2025-38345, CVE-2025-38350, CVE-2025-38498, CVE-2025-39839, CVE-2025-39841, CVE-2025-39846, CVE-2025-39853, CVE-2025-39860, CVE-2025-39864, CVE-2025-39865, CVE-2025-59375)
SCALANCE XCH328 (6GK5328-4TS01-2EC2) vers:intdot/<3.3 (CVE-2022-48174, CVE-2023-7256, CVE-2023-39810, CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366, CVE-2024-6197, CVE-2024-6874, CVE-2024-7264, CVE-2024-8006, CVE-2024-8096, CVE-2024-9681, CVE-2024-11053, CVE-2024-12718, CVE-2024-41996, CVE-2024-47619, CVE-2024-52533, CVE-2025-0167, CVE-2025-0665...
Feb 12, 2026·CISA Advisories
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-0725
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-0725
Vendor Advisory
https://curl.se/docs/CVE-2025-0725.html
Vendor Advisory
https://curl.se/docs/CVE-2025-0725.json
Exploit
https://hackerone.com/reports/2956023
Mailing List
http://www.openwall.com/lists/oss-security/2025/02/05/3
Mailing List
http://www.openwall.com/lists/oss-security/2025/02/06/2
Mailing List
http://www.openwall.com/lists/oss-security/2025/02/06/4
More from curl
9.8
CVE-2026-19931
Negotiate ambient user conn reuse
9.8
CVE-2026-9079
stale proxy password leak
9.8
CVE-2026-8925
SASL double-free
9.8
CVE-2026-11856
cross-origin Digest auth state leak
9.8
CVE-2026-10536
HTTP/2 stream-dependency tree UAF