Internet Bug Bounty · Report #135027

Potential double free in EVP_DigestInit_ex

Validstatus

1upvotes

3 May 2016disclosed

How it was found

If a bounty isn't possible for these non-CVE vulns then I'd appreciate reputation points so it wasn't all for nothing :P.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original