All vulnerabilities

Servers and applications

CVE-2026-3805

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

Severity
High 7.5
Published
11 Mar 2026
Last changed
14 Sept 2026
Added to UpHeron
21 Oct 2026
Fixed in
8.19.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • From 8.13.0 before 8.19.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-3805
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-3805