libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ipreass in ipinput.c.
{ "urgency": "not yet assigned" }