CVE-2025-67899CWE-674

CVE-2025-67899

Low · published December 15, 2025

CVSS v3.1
2.9
EPSS
0%
Percentile
3.1
In the wild
Unconfirmed
What it is

uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas.

The record
Technical detail
CVSS v3.1
2.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00141 · 3.1th percentile
Weakness
CWE-674 · Uncontrolled Recursion
Published
2025-12-15T04:15Z
References (3)
https://github.com/uriparser/uriparser/issues/282 · [email protected]https://github.com/uriparser/uriparser/pull/284 · [email protected]http://www.openwall.com/lists/oss-security/2025/12/15/1 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 14 DEC 22:17Z
    uriparser through 0.9.9 allows unbounded recursion and stack consumption, as demonstrated by ParseMustBeSegmentNzNc with large input containing many commas
    cvelistv5