EIP-2026-104664

This exploit demonstrates a use-after-free vulnerability in PHP's unserialize() function with Serializable classes, allowing arbitrary memory manipulation and potential remote code execution. The PoC leverages crafted serialized data to free memory and then reference it, creating a controlled use-after-free condition.