CVE-2026-8925
Discovered by AISLEPUBLISHEDCWE-415
Description
The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.
CVSS Base Scores
CVSS v3.1(Primary)
9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Version | Status |
|---|---|---|---|
| curl | curl | 8.15.0 | affected |
| curl | curl | 8.17.0 | affected |
| curl | curl | ab650379a8c25ca952f651476d25b4cdd77bb3fc | affected |
| curl | curl | 8.20.0 | affected |
| curl | curl | 8.19.0 | affected |
| curl | curl | 8.18.0 | affected |
| curl | curl | 8.17.0 | affected |
| curl | curl | 8.16.0 | affected |
| curl | curl | 8.15.0 | affected |
Credits
- Joshua Rogers (Aisle Research)(finder)
- Viktor Szakats(remediation developer)