Description
A flaw was found in curl. When curl is built with the GnuTLS library, a blocked transmission during communication with a malicious WebSocket server can trigger an out-of-bounds memory read. A malicious server can exploit this flaw to expose sensitive data from neighboring memory buffers or crash the client, leading to information disclosure or a Denial of Service (DoS).
Published: n/a
Score: 4.8 Medium
EPSS: n/a
KEV: No
Impact: Information Disclosure and Denial of Service
Action: Apply Patch
AI Analysis

Impact

A flaw in curl, when compiled with the GnuTLS library, can cause an out-of-bounds memory read if a blocked transmission occurs during communication with a malicious WebSocket server. The resulting read can expose sensitive data from adjacent memory buffers or crash the client, leading to information disclosure or a denial of service.

Affected Systems

All installations of curl that are built with the GnuTLS library are potentially affected. The vulnerability could exist in any version that employs GnuTLS for TLS handling, regardless of curl release. Specific version details are not provided.

Risk and Exploitability

The CVSS score of 4.8 indicates moderate severity. EPSS is currently unavailable, and the flaw is not listed in CISA KEV. An attacker who can control or impersonate a WebSocket server can trigger the problematic transmission path, making the flaw remotely exploitable. The impact is limited to information leakage or a crash of the client process, but it can affect availability for users of the affected curl instance.

Generated by OpenCVE AI on October 17, 2026 at 01:19 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Obtain and install the latest curl release or patch that resolves the GnuTLS out-of-bounds read issue.
  • If a patch is unavailable, recompile curl using an alternative TLS library such as OpenSSL or mbedTLS to eliminate the GnuTLS dependency.
  • Restrict or disable WebSocket communication to trusted servers only and monitor for abnormal crashes or memory errors in application logs.

Generated by OpenCVE AI on October 17, 2026 at 01:19 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8927-1 curl vulnerabilities
History

Sat, 17 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Curl
Curl curl
Vendors & Products Curl
Curl curl

Sat, 17 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
Description A flaw was found in curl. When curl is built with the GnuTLS library, a blocked transmission during communication with a malicious WebSocket server can trigger an out-of-bounds memory read. A malicious server can exploit this flaw to expose sensitive data from neighboring memory buffers or crash the client, leading to information disclosure or a Denial of Service (DoS).
Title curl: curl: info leak uploading over WebSockets with GnuTLS
Weaknesses CWE-126
References
Metrics threat_severity

None

 cvssV3_1

{'score': 4.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L'}

threat_severity

Low

Subscriptions

Curl Curl
cve-icon MITRE

No data.

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Low

Publid Date: 2026-10-14T12:00:00Z

Links: CVE-2026-107928 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-17T20:15:09Z

Weaknesses