---
id: CVE-2025-49176
title: A flaw was found in the Big Requests extension
summary: >-
  A flaw was found in the Big Requests extension. The request length is
  multiplied by 4 before checking against the maximum allowed size, potentially
  causing an integer overflow and bypassing the size check.
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H'
cwe:
  - CWE-190
published: '2025-06-17'
updated: '2026-06-25'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-49176'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2025:10258'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10342'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10343'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10344'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10346'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10347'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10348'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10349'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10350'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10351'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10352'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10355'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10356'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10360'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10370'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10374'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10375'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10376'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10377'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10378'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10381'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:10410'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:9303'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:9304'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:9305'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:9306'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:9392'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2025:9964'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/security/cve/CVE-2025-49176'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2369954'
    label: secalert@redhat.com
  - url: >-
      https://gitlab.freedesktop.org/xorg/xserver/-/commit/03731b326a80b582e48d939fe62cb1e2b10400d9
    label: secalert@redhat.com
  - url: >-
      https://gitlab.freedesktop.org/xorg/xserver/-/commit/4fc4d76b2c7aaed61ed2653f997783a3714c4fe1
    label: secalert@redhat.com
  - url: 'https://www.x.org/wiki/Development/Security/'
    label: secalert@redhat.com
  - url: 'http://www.openwall.com/lists/oss-security/2025/06/18/2'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2025/06/msg00028.html'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00357
epssPercentile: 0.29543
ingestedAt: '2026-06-29T13:24:34.375Z'
---

## Overview

A flaw was found in the Big Requests extension. The request length is multiplied by 4 before checking against the maximum allowed size, potentially causing an integer overflow and bypassing the size check.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.