SMTP CRLF Injection & Protocol Desynchronization in libcurl

Executive Summary A critical security vulnerability has been identified in `libcurl`'s SMTP protocol handler. The vulnerability allows for **SMTP Command Smuggling** and **Protocol Desynchronization** by injecting CRLF sequences into email address fields. This can be exploited to bypass security …

  if(smtpc->pp.overflow)
    return CURLE_WEIRD_SERVER_REPLY;