GNU Project vulnerabilities

🔔 Create alert RSS

Published CVEs affecting GNU Project products: 2 record(s), with severity, exploitation and fixes.

GNU libbmicrohttpd 2

Exploited only (KEV) →

CVE-2025-62689 High · 7.5 CWE-122 Nov 10, 2025

Heap-based Buffer Overflow in Gnu Libmicrohttpd

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.

CVE-2025-59777 High · 7.5 CWE-476 Nov 10, 2025

NULL Pointer Dereference in Gnu Libmicrohttpd

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.