POJIA破甲
地图 / Buffer Overflow in curl's Rustls Backend

Buffer Overflow in curl's Rustls Backend

内存破坏 / 整数溢出 / #3037583

厂商
curl
严重程度
未评级
赏金
—
弱点
整数溢出
研究员
@cyberguardianrd
披露日期
2025-06-30
资产
https://github.com/curl/curl
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(4239 字符中的一小部分)
A buffer overflow vulnerability exists in the curl library's Rustls backend due to an integer overflow in the dynamic buffer management. This issue could potentially allow an attacker to overwrite memory, leading to application crashes or, in theory, arbitrary code execution. However, exploitation …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 curl 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @cyberguardianrd · 版权归作者与 curl 所有

同类报告

Integer overflow leading to buffer overflowInternet Bug Bounty · 2019-09-25 · $1,000Integer overflow in CipherUpdateInternet Bug Bounty · 2021-04-08Int Overflow lead to Heap OverFlow in exif_thumbnail_extract of exif.cInternet Bug Bounty · 2019-10-21Integer overflow vulnerabilityGlovo · 2022-05-17Cookie Max-Age Integer Overflow Vulnerabilitycurl · 2026-01-19Integer Overflow in schannel.c TLS Data Transmissioncurl · 2025-08-02