CVE-2026-18924

脆弱性の種類

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

影響を受ける製品

• haxx curl

参考情報

• https://curl.se/docs/CVE-2026-18924.html
• https://curl.se/docs/CVE-2026-18924.json
• https://hackerone.com/reports/3916059
• https://hackerone.com/reports/3916059