地图 / SOCK_RAW sockets reachable from Webkit process allows triggering double free in IP6_EXTHDR_CHECK

SOCK_RAW sockets reachable from Webkit process allows triggering double free in IP6_EXTHDR_CHECK

内存破坏 / 双重释放 / #943231

厂商: PlayStation
严重程度: 中危
赏金: $10,000
弱点: 双重释放
研究员: @theflow0
披露日期: 2021-01-12
资产: PlayStation 4
CVE: —

该报告还没有中文解读。

时间线

2020-07-26报告提交
2021-01-12公开披露

阅读 HackerOne 原文 ↗作者 @theflow0 · 版权归作者与 PlayStation 所有

同类报告

Double fdrop on a socket through sys_netcontrolPlayStation · 2026-05-01 · $10,000 Access Violation Reading EXPLOITABLE_0228VLC (European Commission - DIGIT) · 2019-07-24 · $1,135 Double Free Vulnerability in `libcurl` Cookie Management (`cookie.c`)curl · 2025-04-29 CVE-2022-28738: Double free in Regexp compilationInternet Bug Bounty · 2022-05-28 · $4,000 CVE-2021-22945: UAF and double-free in MQTT sendingcurl · 2021-09-15 CVE-2023-27537: HSTS double-freecurl · 2023-03-20