Количество 5
Количество 5
CVE-2026-5507
When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the application to call specific session restore APIs.
CVE-2026-5507
When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the application to call specific session restore APIs.
CVE-2026-5507
Session Cache Restore — Arbitrary Free via Deserialized Pointer
CVE-2026-5507
When restoring a session from cache, a pointer from the serialized ses ...
GHSA-f5fh-xmxq-55p9
When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the application to call specific session restore APIs.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-5507 When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the application to call specific session restore APIs. | CVSS3: 4 | 0% Низкий | 4 месяца назад |
 | CVE-2026-5507 When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the application to call specific session restore APIs. | CVSS3: 4 | 0% Низкий | 4 месяца назад |
 | CVE-2026-5507 Session Cache Restore — Arbitrary Free via Deserialized Pointer | 0% Низкий | 4 месяца назад | |
| CVE-2026-5507 When restoring a session from cache, a pointer from the serialized ses ... | CVSS3: 4 | 0% Низкий | 4 месяца назад |
| GHSA-f5fh-xmxq-55p9 When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the application to call specific session restore APIs. | CVSS3: 4 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу