QUIC libcurl UDP Packet Reception DoS

The vulnerability of the UDP packet reception function in the QUIC library of the cURL software for interacting with servers is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CURL-CVE-2025-0665 eventfd double close

libcurl would wrongly close the same eventfd file descriptor twice when taking down a connection channel after having completed a threaded name resolve...

Same Origin Policy Bypass

libcurl.so is vulnerable to same origin policy bypass. This is due to the libcurl's cookie parser having no public suffix awareness, which could allow for cookies to be set for arbitrary sites by setting a cookie for a top-level domain...