CVE-2025-49176

CVE-2025-49176 describes a high-severity integer overflow vulnerability (CWE-190) in the Big Requests extension, where the request length is quadrupled before size validation, potentially bypassing security checks. This local attack (AV:L) with low complexity (AC:L) could lead to significant confidentiality and integrity impacts (C:L/I:H) as well as denial of service (A:H). Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.