High severity7.5NVD Advisory· Published Nov 10, 2025· Updated Jun 17, 2026
CVE-2025-59777
CVE-2025-59777
Description
NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
14cpe:2.3:a:gnu:libmicrohttpd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:libmicrohttpd:*:*:*:*:*:*:*:*range: <2025-09-16
- (no CPE)range: <=1.0.2
- osv-coords11 versionspkg:rpm/opensuse/libmicrohttpd&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/libmicrohttpd&distro=openSUSE%20Leap%2016.0pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP7pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Micro%206.0pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Micro%206.1pkg:rpm/suse/libmicrohttpd&distro=SUSE%20Linux%20Micro%206.2
< 0.9.77-150600.3.3.1+ 10 more
- (no CPE)range: < 0.9.77-150600.3.3.1
- (no CPE)range: < 1.0.1-160000.3.1
- (no CPE)range: < 0.9.77-150600.3.3.1
- (no CPE)range: < 0.9.77-150600.3.3.1
- (no CPE)range: < 0.9.77-150600.3.3.1
- (no CPE)range: < 0.9.77-150600.3.3.1
- (no CPE)range: < 1.0.1-160000.3.1
- (no CPE)range: < 1.0.1-160000.3.1
- (no CPE)range: < 0.9.77-2.1
- (no CPE)range: < 0.9.77-slfo.1.1_2.1
- (no CPE)range: < 1.0.1-160000.3.1
- GNU Project/GNU libbmicrohttpdv5Range: v1.0.2 and earlier (The vulnerability remains in the source code up until commit ff13abc on the master branch of the libmicrohttpd Git repository
Patches
Vulnerability mechanics
References
3- git.gnunet.org/libmicrohttpd.git/commit/nvdPatch
- jvn.jp/en/jp/JVN76719218/nvdThird Party Advisory
- www.gnu.org/software/libmicrohttpd/nvdProduct
News mentions
0No linked articles in our index yet.