{“lastseen”:”2025-12-17T13:49:28″,”description”:”Summary:\\n\\nA heap-based buffer overflow exists in the AmigaOS-specific DNS resolution\\nfunction Curl_ipv4_resolve_r located in lib\/amigaos.c.\\n\\nThe function uses gethostbyname_r() with a fixed-size heap buffer\\n(CURL_HOSTENT_SIZE) and performs incorrect pointer arithmetic when calculating\\nthe data buffer offset and size. This fails to account for structure alignment\\nand padding requirements, which can result in the resolver writing past the\\nallocated heap buffer.\\n\\nThe issue is specific to AmigaOS builds using the bsdsocket.library backend.\\n\\n## Impact\\n\\nImpact Summary:\\n\\nAn attacker who can influence DNS responses or cause resolution of attacker-\\ncontrolled hostnames may trigger heap memory corruption in curl or libcurl\\nprocesses on AmigaOS.\\n\\nPotential impacts include:\\n- Process crash (denial of service)\\n- Heap memory corruption\\n- Possible code execution depending on heap layout and mitigations\\n\\nThe impact is limited to AmigaOS platforms.”,”published”:”2025-12-17T05:44:02″,”modified”:”2025-12-17T13:20:49″,”type”:”hackerone”,”title”:”curl: Heap buffer overflow in Curl_ipv4_resolve_r due to incorrect buffer alignment and size calculation on AmigaOS”,”source”:””,”references”:””,”id”:”H1:3468410″,”bulletinFamily”:”bugbounty”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/hackerone.com\/reports\/3468410″,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-12-17T13:49:28″,”description”:”Summary:\\n\\nA heap-based buffer overflow exists in the AmigaOS-specific DNS resolution\\nfunction Curl_ipv4_resolve_r located in lib\/amigaos.c.\\n\\nThe function uses gethostbyname_r() with a fixed-size heap buffer\\n(CURL_HOSTENT_SIZE) and performs incorrect…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,117,13,33,7,11,5],"class_list":["post-31540","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-hackerone","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n