CVE-2016-8621

—

CVSS 3.0

7.5 high

EPSS

5%p92

Published

Jul 31, 2018 (Jul 31, 2018)

Modified

Jun 17, 2026

Description

The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short.

Vendors: haxx
Products: curl
Weakness: CWE-125
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (5.2%)

In the news0 stories

No ingested article mentions this CVE yet.