AIKIDO-2026-621074

TL;DR

The pycurl C extension contains multiple memory-safety defects in its curl handle and share object lifecycle management. Use-after-free conditions are reachable through callback paths such as READFUNCTION and WRITEFUNCTION when handles are cleaned up while callbacks still hold references, and error paths in share and easy-handle teardown leak locks and memory, leading to deadlocks or crashes. Under attacker-influenced callback behavior or input data these defects can cause memory corruption or denial of service. The fix corrects the error-path and callback-handling logic to properly manage object lifetimes and release locks.