10 matches found
CVE-2026-73148
GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference...
CVE-2026-73146
GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion...
UBUNTU-CVE-2026-73148
GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference...
UBUNTU-CVE-2026-73146
GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion...
CVE-2026-73148
A flaw was found in svxlink's svxreflector component. A dangling Json::Value reference is written to after the underlying storage is replaced upon receiving repeated MsgNodeInfo messages. This use-after-free write can lead to a crash or potentially arbitrary code execution. Mitigation Update...
CVE-2026-73148
GHSA-6wgq-wg3w-jgvx: svxreflector: use-after-free write via dangling JSON reference...
CVE-2026-73146
A flaw was found in svxlink's svxreflector component. A reentrant client deletion triggered via a sendError write-failure path leads to a use-after-free on the client object. A remote attacker can trigger this condition to crash the reflector server or potentially achieve arbitrary code execution...
CVE-2026-73146
GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion...
