CVE-2026-21675: Iccdev Hint Manager Add Then Delete Uafcve-2026-21675-iccdev-hint-manager-add-then-delete-uaf
Use-after-free / double-free: DeleteHint() is called on a hint manager after AddHint() has already transferred ownership of the same hint pointer to that manager. The hint manager owns and will eventually delete the hint object (and consumers of the manager may retain references into it), so an explicit DeleteHint() on the just-added pointer frees memory tha