EIP-2026-104672

This exploit demonstrates a use-after-free vulnerability in PHP's unserialize() function with GMP objects, allowing arbitrary memory manipulation and potential remote code execution. The PoC constructs a malicious serialized string that triggers the vulnerability, enabling control over freed memory.