PT-2026-114347

CVE-2026-92391

·

Published

2026-10-14

·

Updated

2026-11-03

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)
Description A deeply nested multipart MIME structure created through the public API causes a stack overflow in libcurl during cleanup. This occurs because the curl mime free() function uses excessive recursion depth when traversing the structure, leading to unbounded stack frame allocation and crashing the host process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-109902
AZL-109959
AZL-110040
AZL-110187
AZL-110229
AZL-110304
ECHO-AFE0-F2E5-F868
OPENSUSE-SU-2026:12150-1
SUSE-SU-2026:4954-1
SUSE-SU-2026:5068-1
SUSE-SU-2026:5069-1
SUSE-SU-2026:5071-1
USN-8927-1
USN-8927-2
USN-8932-1
Found an issue in the description? Have something to add? Feel free to write us 👾