CURL-CVE-2026-8925

vendorUSosv

SASL double-free

view advisory published 2026-06-24Licence: per source

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-8925US——
The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer t…
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan