Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the multidone function in lib/multi.c, whose cleanup order ran multischedulepending before the connection was detached and the connection filters had given up their references to the struct Curleasy. An attacker runnin...

curl: Occasional use-after-free in multi_done() libcurl-7.81.0

We are seeing the use of a struct connectdata on a thread after it was returned to the connection cache and thus available for use on other threads including potential deallocation in multidone in libcurl-7.81.0. This could occasionally result in an actual use-after-free, witnessed on Windows 10...