1 matches found
CVE-2026-10637: Use After Free
subsys/net/ip/ipv6mld.c:mldsend read the packet interface via netpktifacepkt after netsenddatapkt returned successfully. Per the network stack's ownership contract include/zephyr/net/netcore.h, and the explicit warning in subsys/net/ip/netcore.c:453-460 'do not use pkt after that call', a...
7.1CVSS5.7AI score0.00299EPSS
SaveExploits1References4
20