Internet Bug Bounty · Report #146200
_php_mb_regex_ereg_replace_exec - double free
Validstatus
1upvotes
12 Nov 2019disclosed
How it was found
_php_mb_regex_ereg_replace_exec is prone to double free that can be turned into a code execution.
Details about the bug: https://bugs.php.net/bug.php?id=72402 (already fixed)