HexBrain

Internet Bug Bounty · Report #175982

Use-after-free in unserialize()

Validstatus
mediumseverity
5upvotes
13 Oct 2019disclosed

How it was found

The bug report at: https://bugs.php.net/bug.php?id=73147 The fix commit at: https://github.com/php/php-src/commit/0e6fe3a4c96be2d3e88389a5776f878021b4c59f

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original