Use-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted torrent file.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-10756.json"