CVE-2018-16890: Integer Overflow
Last updated 25 August 2025
Other sources
libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read.
The function handling incoming NTLM type-2 messages (lib/vauth/ntlm.c:ntlmdecodetype2target) does not validate incoming data correctly and is subject to an integer overflow vulnerability.
Using that overflow, a malicious or broken NTLM server could trick libcurl to accept a bad length + offset combination that would lead to a buffer read out-of-bounds.
Bug introduced by:
https://github.com/curl/curl/commit/86724581b6c
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-16890?
CVE-2018-16890 is a vulnerability in libcurl versions from 7.36.0 to before 7.64.0 that allows for a heap buffer out-of-bounds read.
What is the severity of CVE-2018-16890?
The severity of CVE-2018-16890 is high, with a severity value of 7.5.
How does CVE-2018-16890 impact libcurl?
CVE-2018-16890 can lead to a heap buffer out-of-bounds read in libcurl, potentially causing information leakage or denial of service.
Which versions of libcurl are affected by CVE-2018-16890?
Libcurl versions from 7.36.0 to before 7.64.0 are affected by CVE-2018-16890.
How can I fix the CVE-2018-16890 vulnerability in libcurl?
To fix the CVE-2018-16890 vulnerability in libcurl, update to version 7.64.0 or later.