Identity Parsing Flaw in strongSwan Leads to Potential Memory Issues

CVE-2026-47895

What is CVE-2026-47895?

In versions of strongSwan before 6.0.7, the process of identity parsing and cloning is flawed. This vulnerability arises when EAP-Identities are parsed and result in an empty yet non-NULL encoding; these identities are not cloned accurately, leading to a double-free issue when the duplicates are subsequently destroyed. This memory management flaw can compromise the integrity of applications utilizing strongSwan, demonstrating the importance of addressing such vulnerabilities in security-focused software.

References