AZL-109905
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109905.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109905
- Upstream
- CVE-2026-107928
- Published
- 2026-10-20T21:17:15Z
- Modified
- 2026-10-27T05:36:16Z
- Summary
- CVE-2026-107928 affecting package cmake 3.30.3-15
- Details
-
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when
gnutls_record_send()returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked send. - References