Use After Free/Double Free in Garbage Collection

Disclosed: 2019-10-13 11:08:45 By ryat To ibb
Unknown
Vulnerability Details
https://bugs.php.net/bug.php?id=72605 I don't know if the bug is qualified. I reported this bug since php some guys added this commit: https://github.com/php/php-src/commit/1c84b55adea936b065a20102202bea3d1d243225 Then they had reverted this commit before PHP updates release: https://github.com/php/php-src/commit/171c759d791f809ebc31711fd0b0b5bb632cd2cc So I think this bug have been fixed. if I don't submit this bug until php updates release, then this bug will be tagged as `Type: Security` and fix in next PHP updates release.
Actions
View on HackerOne
Report Stats
  • Report ID: 152281
  • State: Closed
  • Substate: resolved
  • Upvotes: 4
Share this report