strongSwan -- Double-free when destroying certain cloned identities that can lead to remote code executionentered 2026-06-08
no CVE referenced
CVE details
CVE-2026-47895
In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.
- Score
- 7.5 high
- Published
- 2026-08-22
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.