Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A signed integer overflow in docopt.cpp v0.6.2 (LeafPattern::match in docopt_private.h) when merging occurrence counters (e.g., default LONG_MAX + first user "-v/--verbose") can cause counter wrap (negative/unbounded semantics) and lead to logic/policy bypass in applications that rely on occurrence-based limits, rate-gating, or safety toggles. In hardened builds (e.g., UBSan or -ftrapv), the overflow may also result in process abort (DoS).
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
Proud to share that my finding in docopt.cpp is now CVE-2025-67125: an integer overflow that may cause logic bypass and DoS across multiple ecosystems. Deep source review still matters. #CyberSecurity #CVE #Cpp https://t.co/3vhTya2Weo
Post summary
The tweet announces CVE-2025-67125, an integer overflow in docopt.cpp that could enable logic bypass and DoS, but it offers no PoC, exploitation details, or mitigation advice.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | docopt | docopt.cpp | 0.6.2 | - | - |