[php-src] Issue #24804: [SECURITY] BUG-061: Memory Safety - Use After Free (UAF)
| From: | Codeleafly | Date: | Wed, 28 Oct 2026 01:48:44 +0000 |
| Subject: | [php-src] Issue #24804: [SECURITY] BUG-061: Memory Safety - Use After Free (UAF) | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-253258@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/24804
Author: Codeleafly
## 🐛 Security Bug Report
**Bug ID:** BUG-061
**Category:** Memory Safety
**Subcategory:** Use After Free (UAF)
**Severity:** Critical
**CWE:** CWE-416
**CVSS Score:** 8.8
**File:**
**Line:** multiple
**Status:** UNFIXED
**Verified:** False
### Description
Potential use-after-free vulnerability where memory is freed via efree() but pointer may still be
referenced afterward.
### Impact
Arbitrary code execution, information disclosure, crash.
### Remediation
Set pointers to NULL after freeing, ensure no references exist before freeing, use RAII patterns.
### Exploitability
High - remote exploitation possible
### Source
- Repository: https://github.com/php/php-src/
- Branch: master
- Analysis Date: 2026-10-27T16:38:37.937347Z
---
*Auto-generated from static security analysis of php-src.*