2 matches found
Double free in `DCtx::try_clone`
DCtx::tryclone experimental feature, deprecated is a plain copy of the C context. A context owning a dictionary from loaddictionary, refprefix or initusingdict or a dictionary table refddict with RefMultipleDDicts ended up with both copies freeing it. A context cloned mid-frame resumed on...
5.8AI score
SaveExploits0Affected Software1
PT-2026-125063
DCtx::try clone experimental feature, deprecated is a plain copy of the C context. A context owning a dictionary from load dictionary, ref prefix or init using dict or a dictionary table ref ddict with RefMultipleDDicts ended up with both copies freeing it. A context cloned mid-frame resumed on...
5.8AI score
SaveExploits0References5
20