Full title: PHP SplObjectStorage Use-After-Free Exploit 
Category: remote exploits
Platform: php
A use-after-free vulnerability was discovered in unserialize() with SplObjectStorage object's deserialization that can be abused for leaking arbitrary memory blocks or execute arbitrary code remotely.

# 0day.today @ http://0day.today/