CVE-2026-92391
Discovered by AISLEPUBLISHEDCWE-674
Description
A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl_mime_free` leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process.
CVSS Base Scores
CVSS v3.1(Primary)
5.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Version | Status |
|---|---|---|---|
| curl | — | — |