A vulnerability marked as critical has been reported in cURL up to 8.15.0. This impacts an unknown function of the component Cookie Path Handler. Performing manipulation results in out-of-bounds read.
This vulnerability is reported as CVE-2025-9086. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.
