CURL-CVE-2021-22945 UAF and double free in MQTT sending

🗓️ 15 Sep 2021 08:00:00Reported by GoogleType

osv🔗 osv.dev👁 4 Views

UAF and double free vulnerabilities in libcurl during MQTT data sending could lead to security issues.

Reporter	Title	Published	Views	Family All 295
IBM Security Bulletins	Security Bulletin: The Community Edition of IBM ILOG CPLEX Optimization Studio is affected by a vulnerability in libcurl (CVE-2021-22945)	4 Oct 202115:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	1 Nov 202120:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar WinCollect is vulnerable to using components with known vulnerabilities	17 Jun 202218:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libcurl affect IBM Spectrum Protect Plus SQL, File Indexing, and Windows Host agents	19 Sep 202222:54	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - curl (CVE-2021-22945)	22 Apr 202220:08	–	ibm
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2021-1724)	10 Dec 202100:00	–	nessus
Tenable Nessus	CentOS 9 : curl-7.76.1-12.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian DSA-5197-1 : curl - security update	2 Aug 202200:00	–	nessus
Tenable Nessus	FreeBSD : cURL -- Multiple vulnerabilities (c9221ec9-17a2-11ec-b335-d4c9ef517024)	1 Oct 202100:00	–	nessus
Tenable Nessus	GLSA-202212-01 : curl: Multiple Vulnerabilities	18 Dec 202200:00	–	nessus

27 May 2026 02:29Current

9.1High risk

Vulners AI Score9.1

CVSS 25.8

CVSS 3.19.1

EPSS0.06677

SSVC