CVE-2026-80229
EUVD-2026-7216706.09.2026, 18:17
When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership reference; destroying the easy handle prematurely frees this context while the active connection retains a dangling pointer, leading to a heap-use-after-free upon subsequent I/O or post-handshake operations.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| haxx | curl | 8.14.0 ≤ 𝑥 < 8.22.0 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| curl | curl | 8.14.0 ≤ 𝑥 < 8.14.2 | CNA |
| curl | curl | 8.15.0 ≤ 𝑥 < 8.16.1 | CNA |
| curl | curl | 8.17.0 ≤ 𝑥 < 8.20.1 | CNA |
| curl | curl | 8.21.0 ≤ 𝑥 < 8.22.0 | CNA |
| curl | curl | 8.21.0 | CNA |
| curl | curl | 8.20.0 | CNA |
| curl | curl | 8.19.0 | CNA |
| curl | curl | 8.18.0 | CNA |
| curl | curl | 8.17.0 | CNA |
| curl | curl | 8.16.0 | CNA |
| curl | curl | 8.15.0 | CNA |
| curl | curl | 8.14.1 | CNA |
| curl | curl | 8.14.0 | CNA |
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| curl |
| ||||||||||||||||
| libcurl-devel |
| ||||||||||||||||
| libcurl4 |
| ||||||||||||||||
| libcurl4-32bit |
|
Common Weakness Enumeration