> CVE-2025-14819

« BACK_TO_HOME
PUBLISHED
2026-01-08 10:15
MODIFIED
2026-01-08 10:15
EPSS (Prob. Exploit)
0.76%
Top 44.6%
DATA SOURCES:
NVD 🔗 2026-01-08 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-10-11 MSRC 🔗 2026-11-02

> DESCRIPTION

When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CV...
Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulner...
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

OpenSSL partial chain store policy bypass

AFFECTED PACKAGES:
Unknown / Unknown
65 versions affected
ALIASES:
CURL-CVE-2025-14819

> HISTORIQUE DES MODIFICATIONS

Première apparition
08/01/2026 10:15
Source: NVD
📊 ENRICHISSEMENT 19/01/2026 17:38
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 9 months ago

> REFERENCES

https://curl.se/docs/CVE-2025-14819.html
https://curl.se/docs/CVE-2025-14819.json
« BACK_TO_HOME