libcurl

Reported Context (2)

The flaw, a use-after-free tracked as CVE-2026-92392, affects curl and libcurl 8.12.0 through 8.22.0, both the command-line tool and the library that many other programs use for transfers. curl rates it High on its own curl Fixes HTTP/2 Upload Flaw That Can Enable Client-Side Code Execution
To be susceptible to this vulnerability, an application must be using libcurl with a socks5 proxy and make a request to a malicious URL (such as in a webhook scenario). CVE-2023-38545: cURL SOCKS5 Flaw Causes Heap Buffer Overflow

CVE (2)

People (3)

MITRE ATT&CK (1)

Vendors (1)

Products (1)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.