When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.CreditsDaniel WadeStefan EissingReferenceshttps://curl.se/docs/CVE-2026-3805.jsonhttps://curl.se/docs/CVE-2026-3805.htmlhttps://hackerone.com/reports/3591944
