CVE-2019-5482: Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.

Security readout for executives and security teams

CVE-2019-5482 is a critical heap buffer overflow in curl's TFTP protocol handling. Systems are most relevant when curl or libcurl can process TFTP URLs or interact with untrusted TFTP services. The source bundle does not show active exploitation. Exposure is likely where operating systems, appliances, containers, or applications include vulnerable curl or libcurl and permit TFTP use. The bundle lists major vendor advisories, indicating downstream packaging impact, but does not enumerate every affected product. Prioritize remediation for internet-facing, automation, backup, embedded, or appliance environments that use curl or libcurl. Treat as urgent patch management because the worst-case impact is full confidentiality, integrity, and availability compromise, even though exploitation is not confirmed here. Mitigation focus: Inventory curl and libcurl versions across servers, containers, appliances, and application dependencies.; Apply vendor curl security updates from relevant distributions or product vendors.; Move off curl versions 7.19.4 through 7.65.3 where vendor guidance supports it..

Prepared

May 22, 2026, 17:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.