This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake

libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow

curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code

The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`

curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other…

The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have…

The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integer overflow and resultant buffer…

Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have…

When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in…

libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers

An IMAP FETCH response line indicates the size of the returned data, in number of bytes