An integer overflow in curl's URL API results in a buffer... · CVE-2019-5435 · GitHub Advisory Database · GitHub

An integer overflow in curl's URL API results in a buffer...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Oct 14, 2026

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1.

References

Published by the National Vulnerability Database

May 28, 2019

Published to the GitHub Advisory Database May 24, 2022

Last updated Oct 14, 2026

Weaknesses

CWE-131

Incorrect Calculation of Buffer Size

The product does not correctly calculate the size to be used when allocating a buffer. Learn more on MITRE.

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number. Learn more on MITRE.