Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.