{"id":"OSV-2026-589","aliases":[],"status":"published","title":"Heap-double-free in coap_new_oscore_conf","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=503812134\n\n```\nCrash type: Heap-double-free\nCrash state:\ncoap_new_oscore_conf\noscore_conf_parse_target.c\ncoap_new_oscore_conf\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-04-19T00:09:04.852781Z","modified":"2026-04-19T00:09:04Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"libcoap","ranges":[{"type":"GIT","events":[{"introduced":"77929465d3fd497574adf5941f5558e8c2eb7a06"},{"fixed":"e4297c9c890ddb2480bf598b4207169c0271ae30"},{"fixed":"783b5317caf30397df392228d67969af579fa03b"}]}]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=503812134","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2026-589","title":"Heap-double-free in coap_new_oscore_conf","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=503812134\n\n```\nCrash type: Heap-double-free\nCrash state:\ncoap_new_oscore_conf\noscore_conf_parse_target.c\ncoap_new_oscore_conf\n```\n","status":"published","published":"2026-04-19T00:09:04.852781Z","modified":"2026-04-19T00:09:04.853106Z","updated_at":"2026-11-02T15:52:50.263679Z"}]}}