PT-2025-46009 · Julia · Curl Jll+1

Published 2025-10-10 · Updated 2025-10-10

OSV

libcurl's ASN1 parser code has the GTime2str() function, used for parsing an ASN.1 Generalized Time field. If given an syntactically incorrect field, the parser might end up using -1 for the length of the time fraction, leading to a strlen() getting performed on a pointer to a heap buffer area that is not (purposely) null terminated.

This flaw most likely leads to a crash, but can also lead to heap contents getting returned to the application when [CURLINFO CERTINFO](https://curl.se/libcurl/c/CURLINFO CERTINFO.html) is used.

Related Identifiers

JLSEC-2025-38

Affected Products

Curl Jll

Libcurl Jll

References · 7

• https://osv.dev/vulnerability/JLSEC-2025-38 · Vendor Advisory
• https://github.com/curl/curl/commit/27959ecce75cdb2809c0bdb3286e60e08fadb519 · Note
• https://security.netapp.com/advisory/ntap-20240828-0008 · Note
• https://hackerone.com/reports/2629968 · Note
• http://openwall.com/lists/oss-security/2024/07/31/1 · Note
• https://curl.se/docs/CVE-2024-7264.html · Note
• https://curl.se/docs/CVE-2024-7264.json · Note