Tag archive

#useafterfree

Oct 24, 2026

When the Server Is the Attacker: curl CVE-2026-92392 and the Embedded libcurl You Forgot About

A client-side use-after-free in libcurl's HTTP/2 upload path inverts the usual threat model, and most affected code never calls the curl binary. Inventory and mitigation guidance for embedded copies.

Oct 24, 20264 min read0 reactions0 comments

CVE-2026-81934: Redis TLS pending-list use-after-free (public RCE PoC)

Aug 31, 2026

#cve #redis #tls #useafterfree

CVE-2026-81934: Redis TLS pending-list use-after-free (public RCE PoC)

How to fix CVE-2026-81934: upgrade Redis to 8.2.9, 8.4.6, 8.6.6, 8.8.2, or 8.10.1

Aug 31, 20263 min read0 reactions0 comments

Analyzing the Redis Client Use-After-Free Issue

Jul 25, 2026

#webdev #redisclient #useafterfree #flakytests

Analyzing the Redis Client Use-After-Free Issue

Originally published at norvik.tech Introduction A deep dive into the Redis client...

Jul 25, 20264 min read0 reactions0 comments