CVE-2019-3823

CVE-2019-3823 is a heap out-of-bounds read vulnerability affecting libcurl versions 7.34.0 through 7.63.0, specifically impacting the SMTP end-of-response handling. This flaw could allow a remote attacker to trigger a denial of service if a non-NUL terminated buffer is processed under specific conditions. Rated with a CVSS score of 7.5 (HIGH), it has low attack complexity and no user interaction required, but the read contents are not returned to the caller, limiting direct data compromise. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this vulnerability.