CVE-2026-3805

HIGH7.5EPSS 0.03%
Published: 3/11/2026Modified: 5/15/2026

Description

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

Affected packages (2)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (2)