| Package | Affected versions | Patched versions |
|---|---|---|
| curl | ≥ 8.14.0, < 8.22.0 | 8.22.0 |
When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership reference; destroying the easy handle prematurely frees this context while the active connection retains a dangling pointer, leading to a heap-use-after-free upon subsequent I/O or post-handshake operations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free