A signed integer overflow in docopt.cpp v0.6.2 (LeafPattern::match in docopt_private.h) when merging occurrence counters (e.g., default LONG_MAX + first user "-v/--verbose") can cause counter wrap (negative/unbounded semantics) and lead to logic/policy bypass in applications that rely on occurrence-based limits, rate-gating, or safety toggles. In hardened builds (e.g., UBSan or -ftrapv), the overflow may also result in process abort (DoS).
References
| Link | Resource |
|---|---|
| https://gist.github.com/thesmartshadow/672afe8828844c833f46f8ebe2f5f3bd | Exploit Third Party Advisory |
| https://github.com/docopt/docopt.cpp | Product |
Configurations
History
11 Feb 2026, 19:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/thesmartshadow/672afe8828844c833f46f8ebe2f5f3bd - Exploit, Third Party Advisory | |
| References | () https://github.com/docopt/docopt.cpp - Product | |
| CPE | cpe:2.3:a:docopt:docopt.cpp:0.6.2:*:*:*:*:*:*:* | |
| First Time |
Docopt docopt.cpp
Docopt |
23 Jan 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-190 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.4 |
23 Jan 2026, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-23 16:15
Updated : 2026-02-11 19:44
NVD link : CVE-2025-67125
Mitre link : CVE-2025-67125
CVE.ORG link : CVE-2025-67125
JSON object : View
Products Affected
docopt
- docopt.cpp
CWE
CWE-190
Integer Overflow or Wraparound