PT-2025-5689

CVE-2025-0665

Published

2025-01-23

Updated

2026-10-15

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: libcurl (affected versions not specified)

Description: The issue arises when libcurl wrongly closes the same eventfd file descriptor twice after completing a threaded name resolve and taking down a connection channel. This problem occurs due to incorrect handling of the eventfd file descriptor.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-190: Integer Overflow or Wraparound

CWE-1341: Multiple Releases of Same Resource or Handle

CWE-680: Integer Overflow to Buffer Overflow

Related identifiers