Back to Database
Status published
High
CVE-2025-53629
cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability
Vulnerability Description
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.23.0, incoming requests using Transfer-Encoding: chunked in the header can allocate memory arbitrarily in the server, potentially leading to its exhaustion. This vulnerability is fixed in 0.23.0. NOTE: This vulnerability is related to CVE-2025-53628.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53629
Credits & Attribution
No credits recorded in the NVD database.
References
More from yhirose
View All →CVE-2025-66577
cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust
Medium
5.3
CVE-2025-66570
cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)
Critical
10
CVE-2025-53628
cpp-httplib does not limit the length of a line
Medium
6.3
CVE-2025-52887
cpp-httplib has unlimited number of http header fields, which causes memory leak
High
7.5
CVE-2025-46728
cpp-httplib has Unbounded Memory Allocation in Chunked/No-Length Requests
High
7.5
Affected Vendor
yhirose
View all reports →Affected Software
cpp-httplib
Vulnerable Versions:
< 0.23.0
Timeline
Official Publish:
July 10th, 2025
Last Modified:
July 10th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H