curl vulnerabilities (OSS-Fuzz)

27 vulnerabilities.

• curl OSS-Fuzz Heap-use-after-free in ftp_pp_statemachine OSV-2025-657 Fix available No scoreAugust 20, 2025
• curl OSS-Fuzz Stack-buffer-overflow in Curl_output_aws_sigv4 OSV-2022-1065 Fix available No scoreOctober 20, 2022
• curl OSS-Fuzz Stack-buffer-overflow in Curl_output_aws_sigv4 OSV-2022-1046 Fix available No scoreOctober 14, 2022
• curl OSS-Fuzz Heap-buffer-overflow in Curl_headers_push OSV-2022-450 Fix available No scoreJune 2, 2022
• curl OSS-Fuzz Heap-use-after-free in nghttp2_hd_deflate_hd_bufs OSV-2022-141 Fix available No scoreFebruary 11, 2022
• curl OSS-Fuzz Heap-use-after-free in nghttp2_http_record_request_method OSV-2022-139 Fix available No scoreFebruary 11, 2022
• curl OSS-Fuzz Heap-buffer-overflow in Curl_sasl_decode_mech OSV-2021-1796 Fix available No scoreJanuary 2, 2022
• curl OSS-Fuzz Heap-buffer-overflow in seturl OSV-2021-1793 Fix available No scoreJanuary 1, 2022
• curl OSS-Fuzz Heap-buffer-overflow in seturl OSV-2021-1758 Fix available No scoreDecember 25, 2021
• curl OSS-Fuzz Heap-buffer-overflow in Curl_sasl_decode_mech OSV-2021-1756 Fix available No scoreDecember 25, 2021
• curl OSS-Fuzz Heap-buffer-overflow in seturl OSV-2021-1747 Fix available No scoreDecember 24, 2021
• curl OSS-Fuzz Heap-buffer-overflow in Curl_sasl_decode_mech OSV-2021-1737 Fix available No scoreDecember 22, 2021
• curl OSS-Fuzz Heap-buffer-overflow in seturl OSV-2021-1730 Fix available No scoreDecember 21, 2021
• curl OSS-Fuzz Heap-buffer-overflow in Curl_sasl_decode_mech OSV-2021-1629 Fix available No scoreNovember 27, 2021
• curl OSS-Fuzz Heap-buffer-overflow in junkscan OSV-2021-1625 Fix available No scoreNovember 26, 2021
• curl OSS-Fuzz UNKNOWN READ in ntlm_decode_type2_target OSV-2021-696 Fix available No scoreApril 28, 2021
• curl OSS-Fuzz Heap-buffer-overflow in fuzz_read_callback OSV-2017-79 Fix available No scoreJanuary 13, 2021
• curl OSS-Fuzz Heap-buffer-overflow in rtsp_rtp_readwrite OSV-2018-230 Fix available No scoreJanuary 13, 2021
• curl OSS-Fuzz Heap-buffer-overflow in loop OSV-2018-209 Fix available No scoreJanuary 13, 2021
• curl OSS-Fuzz UNKNOWN READ in ftp_disconnect OSV-2018-40 Fix available No scoreJanuary 13, 2021
• curl OSS-Fuzz Heap-buffer-overflow in setcharset OSV-2017-8 Fix available No scoreJanuary 13, 2021
• curl OSS-Fuzz Index-out-of-bounds in fuzz_send_next_response OSV-2017-1 Fix available No scoreJanuary 13, 2021
• curl OSS-Fuzz Negative-size-param in fuzz_tlv_to_string OSV-2020-1347 Fix available No scoreJuly 22, 2020
• curl OSS-Fuzz Heap-buffer-overflow in to_u32 OSV-2020-1230 Fix available No scoreJuly 22, 2020
• curl OSS-Fuzz Negative-size-param in fuzz_tlv_to_string OSV-2020-1080 Fix available No scoreJuly 22, 2020
• curl OSS-Fuzz Use-of-uninitialized-value in dprintf_formatf OSV-2020-600 Fix available No scoreJuly 1, 2020
• curl OSS-Fuzz Use-of-uninitialized-value in smtp_state_ehlo_resp OSV-2020-389 Fix available No scoreJuly 1, 2020