CVE-2026-48850

A flaw was found in PuTTY. The implementation of the little-used RSA kex exchange method RFC 4432 has a double-free issue. In some situations it frees an RSA key by calling the special-purpose function sshrsakexfreekey and then also calling the normal free function on the outermost struct, which ...