curl SMB UAF: freed memory used on repeated request
CVE-2026-3805 Published on March 11, 2026

use after free in SMB connection reuse
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

NVD


Products Associated with CVE-2026-3805

Want to know whenever a new CVE is published for Haxx Curl? stack.watch will email you.

Haxx Curl
 

Affected Versions

curl: