https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 04:17:58 +0000 https://db.gcve.eu/vuln/cve-2024-6874 <p><strong>Affected:</strong> curl, curl libcurl</p> <p>libcurl&#39;s URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the *macidn* IDN backend. The conversion function then fills up the provided buffer exactly - but does not null terminate the string.</p> <p>This flaw can lead to stack contents accidently getting returned as part of the converted string.</p> <p><strong>Affected:</strong> curl, curl libcurl</p> <p>libcurl&#39;s URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers punycode conversions, to and from IDN. Asking to convert a name that is exactly 256 bytes, libcurl ends up reading outside of a stack based buffer when built to use the *macidn* IDN backend. The conversion function then fills up the provided buffer exactly - but does not null terminate the string.</p> <p>This flaw can lead to stack contents accidently getting returned as part of the converted string.</p> https://db.gcve.eu/vuln/cve-2024-6874