PT-2026-4472 · Unknown · Docopt.Cpp

Published 2025-01-01 · Updated 2026-03-18 · CVE-2025-67125

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions docopt.cpp version 0.6.2

Description A signed integer overflow exists in the LeafPattern::match function within docopt private.h of docopt.cpp. This occurs when merging occurrence counters, specifically when a default value of LONG MAX is combined with a user-provided option like -v/--verbose. The overflow can lead to counter wrapping, resulting in negative or unbounded semantics. This can bypass logic or safety mechanisms in applications that depend on occurrence-based limits, rate-gating, or safety toggles. In hardened builds utilizing tools like UBSan or -ftrapv, the overflow may cause the process to abort, leading to a denial-of-service condition.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2025-67125

Affected Products

Docopt.Cpp

References · 11

• 🔥 https://gist.github.com/thesmartshadow/672afe8828844c833f46f8ebe2f5f3bd · Exploit
• https://ubuntu.com/security/CVE-2025-67125 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-67125 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-67125 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-67125 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67125 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-67125 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-67125 · Vendor Advisory
• https://github.com/docopt/docopt.cpp · Note
• https://twitter.com/CVEnew/status/2015362494064402903 · Twitter Post
• https://twitter.com/Alishmery2/status/2034327917212360880 · Twitter Post