Strix
26.1K

CVE-2025-59465

HIGHCVSS 7.5/10EPSS 3.78%

Last modified

CVE-2025-59465 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. EPSS estimates a 3.78% chance of exploitation in the next 30 days.

Description

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets, for example: ``` server.on('secureConnection', socket => { socket.on('error', err => { console.log(err) }) }) ```

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS 3.0
7.5/10

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
3.78%

88.7th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
NodejsNode.Js>= 20.0.0, < 20.20.0
NodejsNode.Js>= 22.0.0, < 22.22.0
NodejsNode.Js>= 24.0.0, < 24.13.0
NodejsNode.Js>= 25.0.0, < 25.3.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2025-59465?
A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets, for example: ``` server.on('secureConnection', socket => { socket.on('error', err => { console.log(err) }) }) ```
How severe is CVE-2025-59465?
CVE-2025-59465 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 3.78% probability of exploitation in the next 30 days.
How do I fix CVE-2025-59465?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2025

View all 2025CVEs →

Are you affected by CVE-2025-59465?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST