Internet Bug Bounty: Use after free vulnerability in phar_parse_zipfile

Malformed phar file with cache configuration leads freed memory as hash key when it inserts into the hash table.

More detail information and original report is here: https://bugs.php.net/bug.php?id=79797 and it was assigned CVE-2020-7068.

Impact

Through this vulnerability that inserts freed memory into the hash table that manages alias file names, an attacker may gain memory information.