{"id":"CVE-2026-92391","published":"2026-10-20T21:17:21.920","lastModified":"2026-10-22T17:21:57.293","description":"A deeply nested multipart MIME structure constructed via the public API causes\na stack overflow in libcurl during normal cleanup operations. An excessive\nrecursion depth within `curl_mime_free` leads to unbounded stack frame\nallocation during structure traversal, ultimately crashing the host process.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://curl.se/docs/CVE-2026-92391.html","tags":[]},{"url":"https://curl.se/docs/CVE-2026-92391.json","tags":[]},{"url":"https://hackerone.com/reports/4024222","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}