CVE-2025-67125

Katalog CVE

CVSS 4.4 · Medium EPSS 0,24%

Kerentanan Integer Overflow or Wraparound pada docopt.cpp. Skor CVSS 3.1 4.4 (Medium) menurut CISA ADP.

Deskripsi (NVD)

A signed integer overflow in docopt.cpp v0.6.2 (LeafPattern::match in docopt_private.h) when merging occurrence counters (e.g., default LONG_MAX + first user "-v/--verbose") can cause counter wrap (negative/unbounded semantics) and lead to logic/policy bypass in applications that rely on occurrence-based limits, rate-gating, or safety toggles. In hardened builds (e.g., UBSan or -ftrapv), the overflow may also result in process abort (DoS).

Rincian

Terbit di NVD

23 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.4 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 14,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/thesmartshadow/672afe8828844c833f46f8ebe2f5f3bd exploit · advisory pihak ketiga
• https://github.com/docopt/docopt.cpp product