This integer overflow (CWE‑190) in GNU Wget up to and including version 1.25.0 stems from unchecked signed integer arithmetic in the parse_content_range() function used to interpret the Content‑Range header. A server can supply a malicious range that overflows the signed 32‑bit counter, triggering undefined behaviour. The result can be a corrupted or desynchronised download, potentially allowing integrity tampering or other side effects. The CVSS score of 6.9 reflects moderate severity.

GNU25.0 and all earlier releases distributed by the GNWget project. The vulnerability affects any system that runs these versions of the wget client.

The CVSS score of 6.9 denotes moderate severity while the EPSS <1 % indicates a very low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalogue, suggesting no known wide‑scale attacks. Based on the description, the attack vector is inferred to be a malicious HTTP server delivering crafted Content‑Range headers to a victim using wget. Attackers can exploit it by hosting a malicious web server that constructs carefully chosen Content‑Range headers and having a victim use the vulnerable wget to download a resource. No local privilege escalation or advanced conditions are required; the attack is performed over a normal network request.