CVE-2026-8925
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
A double-free vulnerability has been found in the curl library's SASL authentication handling. The GSASL context is cleaned up twice without clearing the pointer, causing free() to be called on the same memory region twice.
Risk Assessment
A double-free can corrupt the heap, potentially allowing a remote attacker to execute arbitrary code or cause a denial of service (DoS) in applications using curl with SASL authentication.
Recommendation
Immediately update curl to a patched version that fixes the double-free in SASL handling. Consider temporarily disabling SASL authentication if feasible before applying the update.
Original NVD description (English source)
The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.