CVE-2026-33150: Uaf Dangling Pointer Assignment

A memory resource is destructed or freed, but its corresponding pointer is subsequently assigned to another variable or lifecycle state field without first being set to NULL. This maintains a dangling pointer reference, leading to a reliable Use-After-Free (UAF) vulnerability if that component state is used or accessed later.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C
greprules fetch cve-2026-33150-uaf-dangling-pointer-assignment --engine opengrep

Description

A memory resource is destructed or freed, but its corresponding pointer is subsequently assigned to another variable or lifecycle state field without first being set to NULL. This maintains a dangling pointer reference, leading to a reliable Use-After-Free (UAF) vulnerability if that component state is used or accessed later.