cve/2016/CVE-2016-8618.md

CVE-2016-8618

Description

The libcurl API function called curl_maprintf() before version 7.51.0 can be tricked into doing a double-free due to an unsafe size_t multiplication, on systems using 32 bit size_t variables.

POC

Reference

• http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/fokypoky/places-list