CVE-2026-63381

Libevent (event notification library) contains a use-after-free in buffer.c when evbuffer_add_buffer_reference processes an output buffer whose out_total_len is zero. The function evbuffer_free_all_chains frees the initial empty chain without resetting outbuf->first, outbuf->last, or outbuf...