CVE-2025-67125
MEDIUM EPSS 11.2%
Published Jan 23, 20265mo ago · Modified Jun 17, 20262w ago
4.4 CVSS 3.1
Published Jan 23, 2026 5mo ago
Last Modified Jun 17, 2026 2w ago
Description
A signed integer overflow in docopt.cpp v0.6.2 (LeafPattern::match in docopt_private.h) when merging occurrence counters (e.g., default LONG_MAX + first user "-v/--verbose") can cause counter wrap (negative/unbounded semantics) and lead to logic/policy bypass in applications that rely on occurrence-based limits, rate-gating, or safety toggles. In hardened builds (e.g., UBSan or -ftrapv), the overflow may also result in process abort (DoS).
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity Low
Availability Low
Threat Intelligence
EPSS Exploit Probability
11.2% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-190 Integer Overflow or Wraparound Numeric Error
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| docopt | docopt.cpp | 0.6.2 | any |
References 2
- gist.github.com https://gist.github.com/thesmartshadow/672afe8828844c833f46f8ebe2f5f3bd
- github.com https://github.com/docopt/docopt.cpp
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.