CVE-2026-3805

Description

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

Affected Platforms

Weakness Type

CWE-416

References

• https://curl.se/docs/CVE-2026-3805.html
• https://curl.se/docs/CVE-2026-3805.json
• https://hackerone.com/reports/3591944
• http://www.openwall.com/lists/oss-security/2026/03/11/4