EIP-2026-103497

This is a detailed writeup describing a use-after-free vulnerability in Chromium's PaymentRequest implementation. The issue arises due to incorrect object lifetime management, where a raw pointer to a freed PaymentRequestSpec is accessed, leading to a heap-use-after-free condition.