Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-9080
PUBLISHED
More InfoOfficial Page
Assigner-curl
Assigner Org ID-2499f714-1537-4658-8207-48ae4bb9eae9
View Known Exploited Vulnerability (KEV) details
Published At-03 Jul, 2026 | 06:17
Updated At-03 Jul, 2026 | 06:17
Rejected At-
▼CVE Numbering Authority (CNA)
UAF after pause in socket callback

Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Affected Products
Vendor
CURLcurl
Product
curl
Default Status
unaffected
Versions
Affected
  • From 8.20.0 through 8.20.0 (semver)
  • From 8.19.0 through 8.19.0 (semver)
  • From 8.18.0 through 8.18.0 (semver)
  • From 8.17.0 through 8.17.0 (semver)
  • From 8.16.0 through 8.16.0 (semver)
  • From 8.15.0 through 8.15.0 (semver)
  • From 8.14.1 through 8.14.1 (semver)
  • From 8.14.0 through 8.14.0 (semver)
  • From 8.13.0 through 8.13.0 (semver)
Problem Types
TypeCWE IDDescription
N/AN/ACWE-416 Use After Free
Type: N/A
CWE ID: N/A
Description: CWE-416 Use After Free
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
finder
Joshua Rogers (Aisle Research)
remediation developer
Daniel Stenberg
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://curl.se/docs/CVE-2026-9080.json
N/A
https://curl.se/docs/CVE-2026-9080.html
N/A
https://hackerone.com/reports/3749204
N/A
Hyperlink: https://curl.se/docs/CVE-2026-9080.json
Resource: N/A
Hyperlink: https://curl.se/docs/CVE-2026-9080.html
Resource: N/A
Hyperlink: https://hackerone.com/reports/3749204
Resource: N/A
Details not found