CVE-2025-53628
cpp-httplib does not limit the length of a line
Summary
cpp-httplib does not limit the length of a line
Original description
The description as published by the source.
cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.20.1, cpp-httplib does not have a limit for a unique line, permitting an attacker to explore this to allocate memory arbitrarily. This vulnerability is fixed in 0.20.1. NOTE: This vulnerability is related to CVE-2025-53629.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-53628 cpp-httplib
- Ubuntu UBUNTU-CVE-2025-53628 cpp-httplib
References
- advisory github.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com