CVE-2026-9080 – UAF after pause in socket callback

CVE ID :CVE-2026-9080

Published : July 3, 2026, 6:17 a.m. | 1 hour, 29 minutes ago

Description :Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION`
callback triggers a use-after-free vulnerability, where libcurl attempts to
store a flag using a dangling struct pointer immediately after that pointer’s
memory has been freed.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…