CVE-2025-30742
httpd.c in atophttpd 2.8.0 has an off-by-one error and resultant out-of-bounds read because a certain 1024-character req string would not have a final '\0' character.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-03-26 04:15:23
Güncelleme
2025-03-27 16:45:46
Source Identifier
cve@mitre.org
KEV Date Added
-
Kategoriler
Referanslar
https://github.com/pizhenwei/atophttpd/blob/74c9f14796b15dc9de5839a5749202f933937a9c/httpd.c#L376-L381
https://github.com/pizhenwei/atophttpd/blob/74c9f14796b15dc9de5839a5749202f933937a9c/httpd.c#L492-L496
https://github.com/pizhenwei/atophttpd/blob/74c9f14796b15dc9de5839a5749202f933937a9c/httpd.c#L71-L72