CVE-2026-21675: Iccdev Hint Manager Add Then Delete Uaf

Use-after-free / double-free: DeleteHint() is called on a hint manager after AddHint() has already transferred ownership of the same hint pointer to that manager. The hint manager owns and will eventually delete the hint object (and consumers of the manager may retain references into it), so an explicit DeleteHint() on the just-added pointer frees memory tha

Provally CuratedPublic repositoryHighHigh confidenceVerifiedApache-2.0C++
greprules fetch cve-2026-21675-iccdev-hint-manager-add-then-delete-uaf --engine opengrep

Description

Use-after-free / double-free: DeleteHint() is called on a hint manager after AddHint() has already transferred ownership of the same hint pointer to that manager. The hint manager owns and will eventually delete the hint object (and consumers of the manager may retain references into it), so an explicit DeleteHint() on the just-added pointer frees memory tha