Back to Database
Status published
Medium
CVE-2025-53628
cpp-httplib does not limit the length of a line
Vulnerability Description
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not have a limit for a unique line, permitting an attacker to explore this to allocate memory arbitrarily. This vulnerability is fixed in 0.20.1. NOTE: This vulnerability is related to CVE-2025-53629.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53628
Credits & Attribution
No credits recorded in the NVD database.
References
More from yhirose
View All →CVE-2025-66577
cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust
Medium
5.3
CVE-2025-66570
cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)
Critical
10
CVE-2025-53629
cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability
High
7.5
CVE-2025-52887
cpp-httplib has unlimited number of http header fields, which causes memory leak
High
7.5
CVE-2025-46728
cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests
High
7.5
Affected Vendor
yhirose
View all reports →Affected Software
cpp-httplib
Vulnerable Versions:
< 0.20.1
Timeline
Official Publish:
July 10th, 2025
Last Modified:
July 10th, 2025
Added to House:
July 22nd, 2026