RealFeedApp Attacker can access freed memory via two cached bucket pointers
Researchers found a UAF vulnerability in the file upload handler where pointers to deallocated buffers are reused. The attack is possible with standard PHP configuration without additional settings.
- Field
- computer security
- What they did
- Researchers found a vulnerability in the PHP session upload progress handler where two pointers to data remain cached while the arrays they reference are freed from memory. This allows an attacker to trigger a use-after-free error when attempting to update the data.
- Why it matters
- The vulnerability allows an attacker to execute arbitrary code on the server, which could lead to a complete loss of control over the system.
#php#uaf#memory safety#security vulnerability#heap corruption
