CVE-2016-8618CWE-416

The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on…

Medium · published July 31, 2018

CVSS v3.0
5.3
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.04837 · 91.9th percentile
Weakness
CWE-416 · Use After Free
Published
2018-07-31T21:00Z
EPSS history
Timeline
  • 31 JUL 21:00Z
    The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on…
    cvelistv5