CVE-2025-62504

Envoy is an open source edge and service proxy. Envoy versions earlier than 1.36.2, 1.35.6, 1.34.10, and 1.33.12 contain a use-after-free vulnerability in the Lua filter. When a Lua script executing in the response phase rewrites a response body so that its size exceeds the configured per_connection_buffer_limit_bytes (default 1MB), Envoy generates a local reply whose headers override the original response headers, leaving dangling references and causing a crash. This results in denial of service. Updating to versions 1.36.2, 1.35.6, 1.34.10, or 1.33.12 fixes the issue. Increasing per_connection_buffer_limit_bytes (and for HTTP/2 the initial_stream_window_size) or increasing per_request_buffer_limit_bytes / request_body_buffer_limit can reduce the likelihood of triggering the condition but does not correct the underlying memory safety flaw.

• CWE-416

• https://github.com/envoyproxy/envoy/security/advisories/GHSA-gcxr-6vrp-wff3Vendor Advisory

Published

Oct 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-62498A relative path traversal (ZipSlip) vulnerability was discov…8.8
• CVE-2025-62499Movable Type contains a stored cross-site scripting vulnerab…4.8
• CVE-2025-6250Prior to 25.4.270.0, when wmic.exe is elevated with a full a…6.7
• CVE-2025-62500An out-of-bounds read vulnerability exists in the EMF functi…7.1
• CVE-2025-62501SSH Hostkey misconfiguration vulnerability in TP-Link Archer…8.1
• CVE-2025-62503User with CREATE and no UPDATE privilege for Pools, Connecti…4.6
• CVE-2025-62505LobeChat is an open source chat application platform. The we…3
• CVE-2025-62506MinIO is a high-performance object storage system. In all ve…8.1
• CVE-2025-62507Redis is an open source, in-memory database that persists on…8.8
• CVE-2025-62508Citizen is a MediaWiki skin that makes extensions part of th…6.5
• CVE-2025-62509FileRise is a self-hosted web-based file manager with multi-…8.1
• CVE-2025-6251The Royal Elementor Addons and Templates plugin for WordPres…6.4