OSV-2025-657

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/curl/OSV-2025-657.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-657
Published
2025-08-20T00:12:09.699805Z
Modified
2025-08-20T00:12:09.700264Z
Summary
Heap-use-after-free in ftp_pp_statemachine
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=439473053

Crash type: Heap-use-after-free READ 8
Crash state:
ftp_pp_statemachine
ftp_doing
multi_runsingle
References

Affected packages

OSS-Fuzz / curl

Package

Name
curl
Purl
pkg:generic/curl

Affected ranges

Type
GIT
Repo
https://github.com/curl/curl.git
Events
Introduced
49a1cfaec299a48fd87631eaa3aa1a93233b9ac3
Fixed
c294d0abc5b62b8068af391576be87b821d2ff8b

Affected versions

Other

curl-8_15_0
rc-8_15_0-2
rc-8_15_0-3
rc-8_16_0-1

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range

"435069fcd94d5706919fe7a8967bb4f0fe769acb:c294d0abc5b62b8068af391576be87b821d2ff8b"

introduced_range

"1e2e808defe6850295baa002d07cde9a129ec791:1cdac95e2e1022c298c1e4e551c7e8b5bd8fd5df"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/curl/OSV-2025-657.yaml"