Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-3805

use after free in SMB connection reuse

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
curl

Description

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

curl curl

Default version status: unaffected

  • 8.13.0 to < 8.14.2affected
  • 8.15.0 to < 8.16.1affected
  • 8.17.0 to < 8.19.0affected

curl curl

Default version status: unaffected

  • f4831daa9b2a97e8a2921d6b62cc4dfdd0d8646e to < e090be9f73a7a71459ef678c7cc4b1f75e3ea883affected

curl curl

Default version status: unaffected

  • 8.18.0affected
  • 8.17.0affected
  • 8.16.0affected
  • 8.15.0affected
  • 8.14.1affected
  • 8.14.0affected
  • 8.13.0affected

References