Internet Bug Bounty · Report #175982
Use-after-free in unserialize()
Validstatus
mediumseverity
5upvotes
13 Oct 2019disclosed
How it was found
The bug report at: https://bugs.php.net/bug.php?id=73147 The fix commit at: https://github.com/php/php-src/commit/0e6fe3a4c96be2d3e88389a5776f878021b4c59f