CURL-CVE-2026-92391

vendorUSosv

curl_mime_free stack overflow by recursion

view advisory published 2026-10-14Licence: per source

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl_mime_free` leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-92391US——
A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `cu…
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan