CVE-2026-92391: curl_mime_free stack overflow by recursion

Q: What must an attacker be able to do to trigger the crash?

They must be able to cause the application to construct a deeply nested multipart MIME structure through libcurl's public API. The stack overflow occurs when libcurl performs normal cleanup of that structure.

Q: What is the expected impact of successful exploitation?

The excessive recursion in curl_mime_free exhausts stack space and crashes the host process. The provided information describes a denial-of-service condition.

Published Oct 20, 2026

Updated

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process.

Affected Software

1 affected componentFixes available

debian/curl<=7.88.1-10+deb12u15, <=7.88.1-10+deb12u5, <=8.14.1-2+deb13u5, <=8.14.1-2+deb13u7, <=8.22.0-1

8.23.0-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/curl to a version that resolves this vulnerability.
Fixed in 8.23.0-1

Event History

Oct 15, 2026

CVE Published

via Debian·02:51 PM

Data Sourced

via Debian·02:51 PM

DescriptionAffected Software

Oct 20, 2026

CVE Published

via MITRE·08:24 PM

Data Sourced

via MITRE·08:24 PM

DescriptionWeakness

Data Sourced

via NVD·09:17 PM

Description

Data Sourced

via Ubuntu·11:25 PM

RemedyDescriptionSeverityAffected Software

Data Sourced

via Launchpad·11:25 PM

Description

Frequently Asked Questions

What must an attacker be able to do to trigger the crash?

They must be able to cause the application to construct a deeply nested multipart MIME structure through libcurl's public API. The stack overflow occurs when libcurl performs normal cleanup of that structure.

What is the expected impact of successful exploitation?

The excessive recursion in curl_mime_free exhausts stack space and crashes the host process. The provided information describes a denial-of-service condition.

CVE-2026-92391: curl_mime_free stack overflow by recursion

Affected Software

Remediation

Event History

Frequently Asked Questions

What must an attacker be able to do to trigger the crash?

What is the expected impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker be able to do to trigger the crash?

What is the expected impact of successful exploitation?