Denial of Service Vulnerability in cpp-httplib Library by yhirose
CVE-2026-31870

7.5HIGH

Key Information:

Vendor

Yhirose

Status
Cpp-httplib
Vendor
CVE Published:
11 March 2026

What is CVE-2026-31870?

The cpp-httplib library, a widely used C++11 single-file HTTP/HTTPS library, is susceptible to a denial of service vulnerability when clients utilize the streaming API (e.g., httplib::stream::Get, httplib::stream::Post). If an invalid Content-Length header is received from a server, the library invokes std::stoull() without any input validation or exception handling. This oversight can lead to an unhandled std::invalid_argument or std::out_of_range exception, causing the runtime to terminate the process via SIGABRT. Consequently, any application relying on cpp-httplib can be disrupted by a maliciously crafted HTTP response, jeopardizing application stability. This issue is resolved in version 0.37.1.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

cpp-httplib < 0.37.1

References

https://github.com/yhirose/cpp-httplib/security/advisorie...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.