Description
A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl_easy_cleanup()`. During this final cleanup phase, libcurl attempts to access and modify an internal structure that was already freed during the reset operation.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
curl curl
Default version status: unaffected
7.88.0 to < 8.14.2affected8.15.0 to < 8.16.1affected8.17.0 to < 8.20.1affected
curl curl
Default version status: unaffected
71b7e0161032927cdfb4e75ea40f65b8898b3956 to < bfbff7852f050232edd3e5ca5c6bf2021c340f5aaffected
curl curl
Default version status: unaffected
8.20.0affected8.19.0affected8.18.0affected8.17.0affected8.16.0affected8.15.0affected8.14.1affected8.14.0affected8.13.0affected8.12.1affected8.12.0affected8.11.1affected8.11.0affected8.10.1affected8.10.0affected8.9.1affected8.9.0affected8.8.0affected8.7.1affected8.7.0affected8.6.0affected8.5.0affected8.4.0affected8.3.0affected8.2.1affected8.2.0affected8.1.2affected8.1.1affected8.1.0affected8.0.1affected8.0.0affected7.88.1affected7.88.0affected