CVE-2025-61725

The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.

  • Published Oct 29, 2025
  • CVSS 7.5 high
  • 0.6% chance of exploitation in the next 30 days (EPSS)

Affected software

In the news

CVE-2025-61725 at the National Vulnerability Database