← Database

CVE-2026-9080

HIGH CVSS: 7.3 Published: 2026-07-03 Modified: 2026-07-07

Description

Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Affected Platforms

Haxx Curl

Weakness Type

CWE-416

References