CVE-2025-59777High· 7.5▾ TwilightNULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted pack…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
0.4% → 0.5%
NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier. The vulnerability was fixed in commit ff13abc on the master branch of the libmicrohttpd Git repository, after the v1.0.2 tag. A specially crafted packet sent by an attacker could cause a denial-of-service (DoS) condition.
libmicrohttpd < 1.0.3Upgrade past the affected range:
libmicrohttpd 1.0.3Connected by shared product, vendor, weakness, or advisory.
CVE-2025-62689High· 7.5NULL pointer dereference vulnerability exists in GNU libmicrohttpd v1.0.2 and earlier
CVE-2026-1584High· 7.5A flaw was found in gnutls
CVE-2025-8224Low· 3.3A vulnerability has been found in GNU Binutils 2.44 and classified as problematic
CVE-2023-27371Medium· 5.9GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method
CVE-2021-38604High· 7.5In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference
CVE-2021-4209Medium· 6.5A NULL pointer dereference flaw was found in GnuTLS