Report

CVE-2023-38545: Heap overflow in curl SOCKS5 proxy response handling

778d724a-9dd2-4bf1-9a69-c578798de274

Heap buffer overflow in libcurl's SOCKS5 proxy implementation when handling malicious server responses. A rogue SOCKS5 proxy server can send a crafted response with an excessively large domain name length field, causing curl to attempt reading more bytes than the allocated heap buffer can hold. This leads to heap memory corruption and potential code execution.