News for hackers. Stuff that matters.

A comment on PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619).

Re:PHP session.upload_progress heap UAF (CVE-2026-109618 / -... by synack on Wednesday October 21, 2026 @01:43AM (#50176509)
It’s use-after-free where the “use” is execution of arbitrary code. Yeah, that’s pretty bad.
[ Parent | on HN ]

There are no comments on this comment yet.