CVE-2025-62689: libmicrohttpd before 1.0.3 (exclusive); +1 more affected products

Affected technology

libmicrohttpd · before 1.0.3 (exclusive)
gnu

GNU libbmicrohttpd · v1.0.2 and earlier (The vulnerability remains in the source code up until commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag.)
GNU Project

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition. Vendor/CNA’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality and integrity impact as none; availability impact as high.