CVE-2024-6874

CVE-2024-6874 is a medium-severity vulnerability in libcurl's URL API function curl_url_get() when using the macidn IDN backend. It allows for out-of-bounds read on a stack-based buffer when converting a 256-byte punycode name, potentially exposing stack contents. The vulnerability has a CVSS score of 4.3 (Medium) with a network attack vector and low attack complexity, leading to a potential loss of confidentiality. There is no evidence of active exploitation, public exploit code, or significant community discussion, though it has been mentioned in one media article related to Siemens SINEC OS.