Medium severity5.9NVD Advisory· Published Mar 30, 2023· Updated Jun 17, 2026
CVE-2023-27537
CVE-2023-27537
Description
A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles". This sharing was introduced without considerations for do this sharing across separate threads but there was no indication of this fact in the documentation. Due to missing mutexes or thread locks, two threads sharing the same HSTS data could end up doing a double-free or use-after-free.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- hackerone.com/reports/1897203nvdExploitThird Party Advisory
- security.gentoo.org/glsa/202310-12nvdThird Party Advisory
- security.netapp.com/advisory/ntap-20230420-0010/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.