CVE-2025-0725EPSS p78.2%
CVE-2025-0725CVE-2025-0725
netapp / hci_baseboard_management_controller
Description
When libcurl is asked to perform automatic gzip decompression of
content-encoded HTTP responses with the `CURLOPT_ACCEPT_ENCODING` option,
**using zlib 1.2.0.3 or older**, an attacker-controlled integer overflow would
make libcurl perform a buffer overflow.
Scoring
| CVSS | 7.3 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| EPSS | 1.80% probability of exploitation · percentile 78.2% · 2026-10-17T12:00:28Z |
| Last modified | 2026-10-15 |