## CVE-2025-55763
Buffer Overflow in the URI parser of CivetWeb 1.16 (latest release as of yet).

## Vulnerable code
The crash occurs [here in src/civetweb.c](https://github.com/civetweb/civetweb/blob/v1.16/src/civetweb.c#L15258-L15262) during the last `strcat` marked.

## Fix
See the [pull request](https://github.com/civetweb/civetweb/pull/1347).

## PoC
The PoC crashes the server performing an heap overflow, however it is possible to achieve remote code execution by crafting an exploit for this vulnerability.

`cat http_request_crash_input.txt | nc 127.0.0.1 8080`