PT-2025-29150

CVE-2025-53628

Published

2025-07-10

Updated

2026-03-02

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: cpp-httplib versions prior to 0.20.1

Description: cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Versions prior to 0.20.1 do not have a limit for a unique line, which allows an attacker to allocate memory arbitrarily. This issue is fixed in version 0.20.1.

Recommendations: Update cpp-httplib to version 0.20.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-835: Loop with Unreachable Exit Condition (\'Infinite Loop\')

CWE-770: Allocation of Resources Without Limits or Throttling

CWE-444: Inconsistent Interpretation of HTTP Requests (\'HTTP Request/Response Smuggling\')