Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
libcurl may crash when pause called during socket event
published 4 months ago
Summary
The libcurl library can crash or be exploited if the pause function is used inside its socket event callback, because it tries to use memory that has just been released. This affects any application that uses libcurl for network transfers and relies on that callback. Update libcurl to the latest version or avoid calling the pause function from the socket callback to stay safe.
What to do
- Update bellsoft curl to version 8.21.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Alpaquita:stream | bellsoft | curl |
>= 8.1.2-r0, < 8.21.0-r0 Fix: upgrade to 8.21.0-r0
|
| BellSoft Hardened Containers:stream | bellsoft | curl |
>= 8.1.2-r0, < 8.21.0-r0 Fix: upgrade to 8.21.0-r0
|
Original advisory text
BELL-CVE-2026-9080
References
- https://docs.bell-sw.com/security/cves/CVE-2026-9080 Vendor Advisory
Timeline
Published2 Jul 2026
Updated3 Jul 2026
First seen3 Jul 2026
Track software like this
Free during beta