Stats Digest Feeds
โ† Back to all CVEs

CVE-2026-9080

UNKNOWN NVD
CVSS Score 0
Severity UNKNOWN
Published Jul 03, 2026
Vendor unknown

Description

Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

References