VULNERABILITY INTELLIGENCE

CVE-2025-59777

CVSS score8.7 HIGH

EPSS probability0.48%

CISA KEVNot currently listed

Published2025-11-10

Last modified2026-10-08

Description

NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.