HexBrain
Open on HackerOneSign in

Internet Bug Bounty · Report #180909

Use-after-free in ArrayObject Deserialization

Validstatus
mediumseverity
4upvotes
13 Oct 2019disclosed

How it was found

The bug report at: https://bugs.php.net/bug.php?id=73144 The fix commit at: https://github.com/php/php-src/commit/f74d7d92c8bc1edc2505e0b58546217e9e1ecb40

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original