curl / Docs / Vulnerability table / 7.64.1 vulnerabilities

Vulnerabilities in curl 7.64.1

curl version 7.64.1 was released on March 27 2019. The following 3 security problems are known to exist in this version.

FlawFrom versionTo and includingCVECWE
Windows OpenSSL engine code injection7.61.07.65.1CVE-2019-5443CWE-94: Code Injection
TFTP receive buffer overflow7.19.47.64.1CVE-2019-5436CWE-122: Heap-based Buffer Overflow
Integer overflows in curl_url_set7.62.07.64.1CVE-2019-5435CWE-131: Incorrect Calculation of Buffer Size

Changelog for curl 7.64.1

See vulnerability summary for the previous release: 7.64.0 or the subsequent release: 7.65.0