A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl_mime_free` leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Oct 19, 2026 | Oct 14, 2026 |
| Ubuntu | — | Upgrade libcurl3 (Ubuntu Pro)Upgrade libcurl4t64Upgrade curlUpgrade libcurl3t64-gnutlsUpgrade libcurl4-nss-devUpgrade curl (Ubuntu Pro)Upgrade libcurl4-openssl-devUpgrade libcurl3-nss (Ubuntu Pro)Upgrade libcurl4-gnutls-dev (Ubuntu Pro)Upgrade libcurl4-gnutls-devUpgrade libcurl4-nss-dev (Ubuntu Pro)Upgrade libcurl4-openssl-dev (Ubuntu Pro)Upgrade libcurl3-nssUpgrade libcurl4Upgrade libcurl4 (Ubuntu Pro)Upgrade libcurl3-gnutls (Ubuntu Pro)Upgrade libcurl3-gnutls | Oct 14, 2026 | Oct 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub