{"uuid": "686fa252-6443-421e-8aba-b9fbc6e1e80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://t.me/hackeronereports/212", "content": "\ud83c\udfaf New Report #2974850: CVE-2025-0725: Heap overflow in curl with Content-Encoding gzip and old libz versions\n\ud83d\udd3aSeverity: Low\n\ud83d\udc7d Reporter: z2 \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-05\n\u23f0 Disclosed: 2025-04-27 13:53:37\n\ud83d\udcdd Summary: A vulnerability was reported in the curl project, where a heap overflow could be triggered by a malicious HTTP server serving abnormally large gzip headers. The vulnerability was caused by an integer overflow in curl's support for old libz versions when the Content-Encoding: gzip header was used. The vulnerability was assigned the CVE identifier CVE-2025-0725 and was classified as low severity.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.761127Z"}