Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-1219 High 7.3

Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a...

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Packages
CURL_jll >= 8.13.0+0, < 8.21.0+0
LibCURL_jll >= 8.13.0+0, < 8.21.0+0
Upstream
CVE-2026-9080 GHSA-hf34-v47h-w6m3 EUVD-2026-41511

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

References