{"id":"OSV-2023-1243","aliases":[],"status":"published","title":"Heap-use-after-free in zend_reference_destroy","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64579\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\nzend_reference_destroy\nrc_dtor_func\nzend_leave_helper_SPEC\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-12-01T13:02:45.270293Z","modified":"2023-12-01T13:02:45Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"php","ranges":[{"type":"GIT","events":[{"introduced":"423a1e586e186d1df7838216a88b63b67f37afea"},{"fixed":"1e55c9760178f9d5e1de8b251537b3e8ccf44feb"}]}]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64579","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2023-1243","title":"Heap-use-after-free in zend_reference_destroy","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64579\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\nzend_reference_destroy\nrc_dtor_func\nzend_leave_helper_SPEC\n```\n","status":"published","published":"2023-12-01T13:02:45.270293Z","modified":"2023-12-01T13:02:45.27062Z","updated_at":"2026-11-02T15:52:49.511349Z"}]}}