The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free.