Description
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent
handle is set to share connections with other handles, can lead to
use-after-free in the cleanup process.
Published: 2026-09-06
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 11 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Haxx
Haxx curl
CPEs cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
Vendors & Products Haxx
Haxx curl

Tue, 08 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 06 Sep 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Curl
Curl curl
Weaknesses CWE-416
Vendors & Products Curl
Curl curl

Sun, 06 Sep 2026 18:00:00 +0000

Type Values Removed Values Added
Description A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.
Title HTTP/2 server push UAF
References

Subscriptions

Curl Curl
Haxx Curl
cve-icon MITRE

Status: PUBLISHED

Assigner: curl

Published:

Updated: 2026-09-08T15:41:24.050Z

Reserved: 2026-08-05T08:31:56.125Z

Link: CVE-2026-18924

cve-icon Vulnrichment

Updated: 2026-09-08T15:41:19.299Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-06T18:17:20.553

Modified: 2026-09-11T20:01:29.600

Link: CVE-2026-18924

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-08T18:45:05Z

Weaknesses