Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code gain sensitive information cause denial-of-service conditions bypass security restrictions and perform unauthorized actions. This may aid in other attacks.