When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in a subsequent call to send data and also free it again.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libcurl | Haxx | 7.73.0 (including) | 7.78.0 (including) |
| Curl | Ubuntu | devel | * |
| Curl | Ubuntu | hirsute | * |
| Curl | Ubuntu | impish | * |
| Curl | Ubuntu | jammy | * |
| Curl | Ubuntu | trusty | * |
| Curl | Ubuntu | upstream | * |
| Curl | Ubuntu | xenial | * |