CVE-2024-6874

libcurl's URL API functioncurl_url_get() offers punycodeconversions, to and from IDN. Asking to convert a name that is exactly 256bytes, libcurl ends up reading outside of a stack based buffer when built touse the macidn IDN backend. The conversion function then fills up theprovided buffer exactly ...