CVE-2019-5436

CVE-2019-5436

Vendor Curl

Product curl

Weakness CWE-122

Published May 28, 2019

Last update April 15, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.

Key dates

02Disclosure timeline

May 28, 2019 CVE published

April 15, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-5436 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

04Related CVE

CVE-2024-27341 Kofax Power PDF PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2025-21410 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability CVE-2024-49008 SQL Server Native Client Remote Code Execution Vulnerability CVE-2025-2152 Open Asset Import Library Assimp File BaseImporter.cpp ConvertToUTF8 heap-based overflow CVE-2024-38237 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability