CVE-2026-3805
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
Published Mar 11, 2026 · updated Sep 14, 2026 · haxx curl
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 11, 2026 · NIST NVD
Detected
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
Sep 14, 2026 · NIST NVD
Updated
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
Affected
- cpe haxx/curlversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-3805
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-3805
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
nvd.nist.gov