Description (CNA)
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| curl / curl | affected 8.13.0 before 8.14.2; affected 8.15.0 before 8.16.1; affected 8.17.0 before 8.19.0 |
| curl / curl | affected f4831daa9b2a97e8a2921d6b62cc4dfdd0d8646e before e090be9f73a7a71459ef678c7cc4b1f75e3ea883 |
| curl / curl | affected 8.18.0; affected 8.17.0; affected 8.16.0; affected 8.15.0; affected 8.14.1; affected 8.14.0; affected 8.13.0 |
CWE
CWE-416
References
- https://curl.se/docs/CVE-2026-3805.json
- https://curl.se/docs/CVE-2026-3805.html
- https://hackerone.com/reports/3591944
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.