When libcurl is asked to perform automatic gzip decompression of content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option, **using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would make libcurl perform a buffer overflow.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://curl.se/docs/CVE-2025-0725.html Vendor Advisory
- https://curl.se/docs/CVE-2025-0725.json Vendor Advisory
- https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7 Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.3 · netapp, haxxNVD modified 2026-10-15 02:17
Affected (CPE criteria) 8
cpe:2.3:a:netapp:hci_baseboard_management_controller:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:hci_h610s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:hci_h610c_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:hci_h615c_firmware:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:solidfire_\&_hci_storage_node:-:*:*:*:*:*:*:*cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*
References 10
- https://curl.se/docs/CVE-2025-0725.html Vendor Advisory
- https://curl.se/docs/CVE-2025-0725.json Vendor Advisory
- https://hackerone.com/reports/2956023 Exploit, Issue Tracking
- http://www.openwall.com/lists/oss-security/2025/02/05/3 Mailing List
- http://www.openwall.com/lists/oss-security/2025/02/06/2 Mailing List
- http://www.openwall.com/lists/oss-security/2025/02/06/4 Mailing List
- https://github.com/curl/curl/commit/76f83f0db23846e254d940ec7 Patch
- https://security.netapp.com/advisory/ntap-20250306-0009/ Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-089022.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html