CVE-2025-55763

Published August 29th, 2025

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of service or arbitrary code execution.

civetweb/civetweb

Embedded C/C++ web server

GitHub

3.4K

krispybyte/CVE-2025-55763

Heap overflow PoC for CivetWeb CVE-2025-55763

GitHub