A critical out-of-bounds read vulnerability in curl versions 8.13.0 through 8.15.0 can lead to application crashes or improper cookie handling when transitioning between secure and insecure protocols.

This flaw exists in the path comparison logic of the cookie management system, where an unauthenticated attacker can trigger an out-of-bounds read by inducing a redirect from a secure HTTPS host to an insecure HTTP host using specific cookie attributes.

The vulnerability poses a significant risk to service availability, as the out-of-bounds read can lead to process crashes. Furthermore, the potential for incorrect cookie path comparisons creates a security risk where sensitive session data could be improperly exposed or overridden, undermining the integrity of secure communications. Given the CVSS score of 7.5, this high-severity issue necessitates prompt attention to maintain system stability and session security.

Immediate Action: Upgrade to the latest version of curl that includes the fix provided by the vendor.

Proactive Monitoring: Monitor application logs for unexpected crashes or service interruptions related to network requests and cookie handling.

Compensating Controls: Ensure that applications utilizing curl are configured to enforce strict HTTPS communication, minimizing the risk of redirects to insecure HTTP endpoints where this vulnerability is triggered.

Public Exploit Available: Unknown

The severity of this flaw, combined with the ubiquity of curl in modern infrastructure, demands an immediate review of all systems utilizing the affected versions. Security teams should prioritize patching to the latest stable release to eliminate the risk of crashes and potential cookie-related session compromises. Failure to address this vulnerability may leave critical services exposed to stability issues or logic-based security bypasses.