Description (CNA)
By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| curl / curl | affected 8.16.0 before 8.16.1; affected 8.17.0 before 8.20.1 |
| curl / curl | affected 0b091328773c64e23f5c4739da74527093c6a5ab before 849317ff5c5a5e13f50ec3d001e46ddffa77d8a4 |
| curl / curl | affected 8.20.0; affected 8.19.0; affected 8.18.0; affected 8.17.0; affected 8.16.0 |
CWE
CWE-770
References
- https://curl.se/docs/CVE-2026-11586.json
- https://curl.se/docs/CVE-2026-11586.html
- https://hackerone.com/reports/3788931
ADP enrichment
No English description supplied.
No references supplied.