Description
When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.
Metrics
CVSS 3.1 5.3/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:NWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| curl | curl | >= 7.87.0, < 8.14.2; >= 8.15.0, < 8.16.1; >= 8.17.0, < 8.18.0 |
| curl | curl | >= 3c16697ebd796f799227be293e8689aec5f8190d, < cd046f6c93b39d673a58c18648d8906e954c4f5d |
| curl | curl | 8.17.0; 8.16.0; 8.15.0; 8.14.1; 8.14.0; 8.13.0; 8.12.1; 8.12.0; 8.11.1; 8.11.0; 8.10.1; 8.10.0; 8.9.1; 8.9.0; 8.8.0; 8.7.1; 8.7.0; 8.6.0; 8.5.0; 8.4.0 |
References
- https://curl.se/docs/CVE-2025-14819.htmlMitigation, Patch, Vendor Advisory
- https://curl.se/docs/CVE-2025-14819.jsonVendor Advisory
- http://www.openwall.com/lists/oss-security/2026/01/07/5Mailing List, Mitigation, Patch, Third Party Advisory
Timeline
- Published
- Jan 8, 2026
- Last modified
- Oct 14, 2026
- NVD status
- Modified