Use After Free in Freebsd

CVE-2026-49417

Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory could then be reused elsewhere while still accessible through the stale mapping. The /dev/dsp d…

Vulnerability class: Use-After-Free

EPSS: 0.002 (8.6th percentile) — read the EPSS interpretation.

Affected products

  • Freebsd — versions 15.0-RELEASE, 14.4-RELEASE, 14.3-RELEASE

Weakness classification (CWE)

References