Security vulnerabilities and automated fixes for cygwin issues
1 post found
A critical use-after-free vulnerability was discovered and patched in the multi-threaded ICMP processing path of a Windows/Cygwin network probing library, where freed memory pointers were not nullified, creating a dangerous race condition between concurrent threads. Left unpatched, this flaw could allow attackers to corrupt heap metadata, potentially leading to arbitrary code execution or denial of service. The fix ensures that dangling pointers are eliminated immediately after memory is freed,