{"id":"CVE-2025-63938","details":"Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port() function within src/reqs.c.","modified":"2026-08-12T15:14:31.654825Z","published":"2025-11-26T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/63xxx/CVE-2025-63938.json"},"references":[{"type":"WEB","url":"https://github.com/rayinaw/my-hub/blob/main/CVE-2025-63938/DISCLOSURE.md"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/63xxx/CVE-2025-63938.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-63938"},{"type":"REPORT","url":"https://github.com/tinyproxy/tinyproxy/issues/586"},{"type":"FIX","url":"https://github.com/tinyproxy/tinyproxy/commit/3c0fde94981b025271ffa1788ae425257841bf5a"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tinyproxy/tinyproxy","events":[{"introduced":"0"},{"fixed":"3c0fde94981b025271ffa1788ae425257841bf5a"}],"database_specific":{"cpe":"cpe:2.3:a:tinyproxy_project:tinyproxy:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.11.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["1.11.2","1.11.1","1.11.0","1.11.0-rc1","1.10.0","1.8.0","1.7.1"],"database_specific":{"vanir_signatures_modified":"2026-08-12T15:14:31Z","vanir_signatures":[{"digest":{"function_hash":"302707747641077644696622742706700920699","length":293},"id":"CVE-2025-63938-babfbe8b","signature_type":"Function","signature_version":"v1","source":"https://github.com/tinyproxy/tinyproxy/commit/3c0fde94981b025271ffa1788ae425257841bf5a","target":{"file":"src/reqs.c","function":"strip_return_port"},"deprecated":false},{"digest":{"threshold":0.9,"line_hashes":["276312591894234864377565896370945542305","318970560386307279852808699020775359057","53000446853471817781338246616243910440","60221259447259706014017463609644023103","102640944346475227448736077553127604067","119569850469365398460724764502321397960","43476673980889855355684248184015703920","268482448650493317839320457212091495887","284864547210007797928063525734751339312"]},"id":"CVE-2025-63938-c3352de0","signature_type":"Line","signature_version":"v1","source":"https://github.com/tinyproxy/tinyproxy/commit/3c0fde94981b025271ffa1788ae425257841bf5a","target":{"file":"src/reqs.c"},"deprecated":false}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-63938.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}