A use-after-free vulnerability exists in libcurl when an application
configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or
`CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and
finally terminates the handle with `curl_easy_cleanup()`. During this final
cleanup phase, libcurl attempts to access and modify an internal structure
that was already freed during the reset operation.

https://curl.se/docs/CVE-2026-10536.html

https://curl.se/docs/CVE-2026-10536.json

https://hackerone.com/reports/3751697

[{"vendor":"curl","product":"curl","defaultStatus":"unaffected","versions":[{"version":"8.20.0","lessThanOrEqual":"8.20.0","versionType":"semver","status":"affected"},{"version":"8.19.0","lessThanOrEqual":"8.19.0","versionType":"semver","status":"affected"},{"version":"8.18.0","lessThanOrEqual":"8.18.0","versionType":"semver","status":"affected"},{"version":"8.17.0","lessThanOrEqual":"8.17.0","versionType":"semver","status":"affected"},{"version":"8.16.0","lessThanOrEqual":"8.16.0","versionType":"semver","status":"affected"},{"version":"8.15.0","lessThanOrEqual":"8.15.0","versionType":"semver","status":"affected"},{"version":"8.14.1","lessThanOrEqual":"8.14.1","versionType":"semver","status":"affected"},{"version":"8.14.0","lessThanOrEqual":"8.14.0","versionType":"semver","status":"affected"},{"version":"8.13.0","lessThanOrEqual":"8.13.0","versionType":"semver","status":"affected"},{"version":"8.12.1","lessThanOrEqual":"8.12.1","versionType":"semver","status":"affected"},{"version":"8.12.0","lessThanOrEqual":"8.12.0","versionType":"semver","status":"affected"},{"version":"8.11.1","lessThanOrEqual":"8.11.1","versionType":"semver","status":"affected"},{"version":"8.11.0","lessThanOrEqual":"8.11.0","versionType":"semver","status":"affected"},{"version":"8.10.1","lessThanOrEqual":"8.10.1","versionType":"semver","status":"affected"},{"version":"8.10.0","lessThanOrEqual":"8.10.0","versionType":"semver","status":"affected"},{"version":"8.9.1","lessThanOrEqual":"8.9.1","versionType":"semver","status":"affected"},{"version":"8.9.0","lessThanOrEqual":"8.9.0","versionType":"semver","status":"affected"},{"version":"8.8.0","lessThanOrEqual":"8.8.0","versionType":"semver","status":"affected"},{"version":"8.7.1","lessThanOrEqual":"8.7.1","versionType":"semver","status":"affected"},{"version":"8.7.0","lessThanOrEqual":"8.7.0","versionType":"semver","status":"affected"},{"version":"8.6.0","lessThanOrEqual":"8.6.0","versionType":"semver","status":"affected"},{"version":"8.5.0","lessThanOrEqual":"8.5.0","versionType":"semver","status":"affected"},{"version":"8.4.0","lessThanOrEqual":"8.4.0","versionType":"semver","status":"affected"},{"version":"8.3.0","lessThanOrEqual":"8.3.0","versionType":"semver","status":"affected"},{"version":"8.2.1","lessThanOrEqual":"8.2.1","versionType":"semver","status":"affected"},{"version":"8.2.0","lessThanOrEqual":"8.2.0","versionType":"semver","status":"affected"},{"version":"8.1.2","lessThanOrEqual":"8.1.2","versionType":"semver","status":"affected"},{"version":"8.1.1","lessThanOrEqual":"8.1.1","versionType":"semver","status":"affected"},{"version":"8.1.0","lessThanOrEqual":"8.1.0","versionType":"semver","status":"affected"},{"version":"8.0.1","lessThanOrEqual":"8.0.1","versionType":"semver","status":"affected"},{"version":"8.0.0","lessThanOrEqual":"8.0.0","versionType":"semver","status":"affected"},{"version":"7.88.1","lessThanOrEqual":"7.88.1","versionType":"semver","status":"affected"},{"version":"7.88.0","lessThanOrEqual":"7.88.0","versionType":"semver","status":"affected"}]}]