curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

A vulnerability in curl's handling of HTTP/2 uploads allows a malicious server to corrupt the client's memory. This flaw can potentially lead to code execution on the client machine, as demonstrated by a proof-of-concept. The curl project addressed the issue in version 8.23.0. Exploiting this vulnerability requires detailed knowledge of the client's build and memory layout. A successful attack is expected to typically result in a client crash rather than code execution. The fix was implemented to prevent such potential attacks.