CVE-2026-8925 — SASL double-free
The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointe…
Published: 2026-07-03 · CVSS: 9.8 · CVSS 3.1
The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7