An integer overflow in curl's URL API results in a buffer... · CVE-2019-5435 · GitHub Advisory Database · GitHub

An integer overflow in curl's URL API results in a buffer...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

References

Published by the National Vulnerability Database

May 28, 2019

Published to the GitHub Advisory Database May 24, 2022

Last updated Apr 4, 2024

Weaknesses

CWE-131

Incorrect Calculation of Buffer Size

The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow. Learn more on MITRE.

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Learn more on MITRE.