CVE-2026-3805 - Vulnerability Analysis

Overview

curl contains a use after free vulnerability caused by reuse of a data pointer pointing to already freed memory during a second SMB request to the same host, letting attackers cause memory corruption or crash, exploit requires crafted SMB requests.

Severity & Score

Impact

Attackers can cause memory corruption or application crash, potentially leading to denial of service or code execution.

Mitigation

Update to the latest version of curl.

References

• http://www.openwall.com/lists/oss-security/2026/03/11/4
• https://curl.se/docs/CVE-2026-3805.html
• https://curl.se/docs/CVE-2026-3805.json
• https://hackerone.com/reports/3591944

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 11, 2026

🟠 CVE-2026-3805 - High (7.5) When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-3805/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner