← CVE Intelligence

CVE-2026-47895

strongSwan / strongSwan PUBLISHED

Description (CNA)

In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed.

Affected (CNA)

Vendor / productVersions
strongSwan / strongSwanaffected 4.3.3 before 6.0.7

CWE

CWE-415

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.