Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION`
callback triggers a use-after-free vulnerability, where libcurl attempts to
store a flag using a dangling struct pointer immediately after that pointer’s
memory has been freed.
2026年9月4日
CVE-2026-9080 [HIGH] – Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback trig
📑 文章目录
