Memory Allocation Vulnerability in cpp-httplib by Yhirose

CVE-2025-53629

What is CVE-2025-53629?

The cpp-httplib is a C++11 single-file header-only cross-platform HTTP/HTTPS library that contains a vulnerability related to the handling of incoming requests using 'Transfer-Encoding: chunked'. Before version 0.23.0, the library's server can allocate memory in an unrestricted manner, which can result in memory exhaustion, jeopardizing the performance and availability of applications relying on this library. This issue highlights the importance of updating to the latest version to mitigate potential risks.

References