CVE-2025-32033— Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-32033
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apollo Router Operation Limits Vulnerable to Bypass via Integer Overflow
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Prior to 1.61.2 and 2.1.1, the operation limits plugin uses unsigned 32-bit integers to track limit counters (e.g. for a query's height). If a counter exceeded the maximum value for this data type (4,294,967,295), it wrapped around to 0, unintentionally allowing queries to bypass configured thresholds. This could occur for large queries if the payload limit were sufficiently increased, but could also occur for small queries with deeply nested and reused named fragments. This has been remediated in apollo-router versions 1.61.2 and 2.1.1.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apollo Router Core 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apollo Router Core是Apollo社区的一个路由器核心应用程序。 Apollo Router Core 1.61.2之前版本和2.1.1之前版本存在缓冲区错误漏洞，该漏洞源于操作限制计数器溢出，可能导致查询绕过阈值。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| apollographql | router | < 1.61.2 | - |
II. Public POCs for CVE-2025-32033
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-32033
请登录查看更多情报信息。
Same Patch Batch · apollographql · 2025-04-07 · 6 CVEs total
| CVE-2025-32031 | 7.5 HIGH | Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Optimization |
| CVE-2025-32030 | 7.5 HIGH | Apollo Gateway Query Planner Vulnerable to Excessive Resource Consumption via Named Fragme |
| CVE-2025-32034 | 7.5 HIGH | Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Named Fragmen |
| CVE-2025-32032 | 7.5 HIGH | Apollo Router Query Planner Vulnerable to Excessive Resource Consumption via Optimization |
| CVE-2025-31496 | 7.5 HIGH | apollo-compiler Named Fragment Processing Vulnerability |
IV. Related Vulnerabilities
Same vendor: apollographql
- CVE-2026-35577
Missing Host Header Validation in Apollo MCP Server for Loca - CVE-2026-23897
Apollo Server is vulnerable to denial of service with `start - CVE-2025-64530
@apollo/composition has Improper Enforcement of Access Contr - CVE-2025-64347
Apollo Router Improperly Enforces Renamed Access Control Dir - CVE-2025-64173
Apollo Router Core: Access Control Bypass on Polymorphic Typ
Same weakness: CWE-119
- CVE-2026-22167
GPU DDK - Cache resident PM buffers writable by other GPU re - CVE-2026-27890
Firebird has Pre-Auth DOS when Processing Out of Order CNCT_ - CVE-2026-34864
Huawei HarmonyOS 安全漏洞 - CVE-2026-4149
Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code - CVE-2026-34988
Wasmtime leaks data between pooling allocator instances
V. Comments for CVE-2025-32033
No comments yet