CVE-2025-0725: Haxx Curl buffer overflow (CVSS 7.3)

Description

When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityLow

IntegrityLow

AvailabilityLow

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Haxx Curl≥ 7.10.5 < 8.12.0

Haxx Libcurl≥ 7.10.5 < 8.12.0

Netapp Hci Baseboard Management Controllerall versions

Netapp Solidfire & Hci Management Nodeall versions

Netapp Solidfire & Hci Storage Nodeall versions

Netapp Hci H610c Firmwareall versions

Netapp Hci H610s Firmwareall versions

Netapp Hci H615c Firmwareall versions

Remediation

Fixed in

Haxx Curl≥ 8.12.0

Haxx Libcurl≥ 8.12.0

Patch & vendor advisories

References

https://curl.se/docs/CVE-2025-0725.htmlVendor Advisory
https://curl.se/docs/CVE-2025-0725.jsonVendor Advisory
https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7Patch
https://hackerone.com/reports/2956023ExploitIssue Tracking
https://security.netapp.com/advisory/ntap-20250306-0009/Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/02/05/3Mailing List
http://www.openwall.com/lists/oss-security/2025/02/06/2Mailing List
http://www.openwall.com/lists/oss-security/2025/02/06/4Mailing List

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2025-0725 being actively exploited?

CVE-2025-0725 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 1.26%.

How severe is CVE-2025-0725?

CVE-2025-0725 has a CVSS 3.1 base score of 7.3, rated high. EPSS estimates a 1.26% probability of exploitation.

Which products are affected by CVE-2025-0725?

Affected products include Haxx Curl, Haxx Libcurl, Netapp Hci Baseboard Management Controller, Netapp Solidfire & Hci Management Node, Netapp Solidfire & Hci Storage Node, and 3 more.

How do I fix CVE-2025-0725?

Upgrade affected software to a fixed version, for example Haxx Curl 8.12.0, Haxx Libcurl 8.12.0 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-0725 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo