Riskcovery

CVE-2025-14819

OpenSSL partial chain store policy bypass

State
Published
Severity
5.3 Medium
Published
Jan 8, 2026
Updated
Sep 15, 2026
Reserved
Dec 17, 2025

Read the record on cve.org

Description

When doing TLS related transfers with reused easy or multi handles and altering the `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally reuse a CA store cached in memory for which the partial chain option was reversed. Contrary to the user's wishes and expectations. This could make libcurl find and accept a trust chain that it otherwise would not.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:NCISA-ADP

Weaknesses

  • CWE-295 Improper Certificate Validation

Affected Products

ProductVersions
curlcurl
  • 7.87.0 to before 8.14.2Affected
  • 8.15.0 to before 8.16.1Affected
  • 8.17.0 to before 8.18.0Affected
curlcurl
  • 3c16697ebd796f799227be293e8689aec5f8190d to before cd046f6c93b39d673a58c18648d8906e954c4f5dAffected
curlcurl
  • 8.17.0Affected
  • 8.16.0Affected
  • 8.15.0Affected
  • 8.14.1Affected
  • 8.14.0Affected
  • 8.13.0Affected
  • 8.12.1Affected
  • 8.12.0Affected
  • 8.11.1Affected
  • 8.11.0Affected
  • 8.10.1Affected
  • 8.10.0Affected
  • 8.9.1Affected
  • 8.9.0Affected
  • 8.8.0Affected
  • 8.7.1Affected
  • 8.7.0Affected
  • 8.6.0Affected
  • 8.5.0Affected
  • 8.4.0Affected
  • 8.3.0Affected
  • 8.2.1Affected
  • 8.2.0Affected
  • 8.1.2Affected
  • 8.1.1Affected
  • and 6 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.