CVE-2025-67125

Published: Jan 23, 2026Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Exploitability: 1.8 / Impact: 2.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A signed integer overflow in docopt.cpp v0.6.2 (LeafPattern::match in docopt_private.h) when merging occurrence counters (e.g., default LONG_MAX + first user "-v/--verbose") can cause counter wrap (negative/unbounded semantics) and lead to logic/policy bypass in applications that rely on occurrence-based limits, rate-gating, or safety toggles. In hardened builds (e.g., UBSan or -ftrapv), the overflow may also result in process abort (DoS).

Affected (1)

Products: Docopt: Docopt.cpp

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Docopt Docopt.cpp	Version 0.6.2

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

https://gist.github.com/thesmartshadow/672afe8828844c833f46f8ebe2f5f3bd

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/docopt/docopt.cpp

Source: cve@mitre.org

Product

Timeline

No history available yet.