[CVE-2022-43552] How to share what you’ve learned from our audits

CVE

CVE-2022-43552

Published

2022-12-22 20:10

Collected

2026-07-03 04:02

---
id: 1712
title: "[CVE-2022-43552] How to share what you’ve learned from our audits"
cve: CVE-2022-43552
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2022/12/22/curl-security-audit-threat-model/"
published_at: "2022-12-22T20:10:39Z"
tags: ["vulnerability-disclosure", "curl", "audits"]
phying_url: "https://phying.com/item/1712"
lang: en
---

# [CVE-2022-43552] How to share what you’ve learned from our audits

## Summary

Trail of Bits reflects on cURL founder Daniel Stenberg's candid blog post about their security audit: the engagement experience, meaningful critiques, and one post-audit use-after-free (CVE-2022-43552) found by a fuzzer left running after the review ended.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **CVE:** CVE-2022-43552
- **Published:** 2022-12-22T20:10:39Z
- **Original:** https://blog.trailofbits.com/2022/12/22/curl-security-audit-threat-model/
- **Phying News:** https://phying.com/item/1712