UNKNOWN NVD

CVE-2026-107928

When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when

When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send()` returns a number of bytes sent **greater than the number of bytes it was given to send**. GnuTLS does that after a blocked send.

Remediation

$ sudo apt install --only-upgrade curl

References

Published: 2026-10-20 · Source: NVD · Feed updated: 2026-10-20
This unknown severity vulnerability was published on 2026-10-20 via NVD. A remediation command is available below.
vulnfeed aggregates 18176 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.