In nDPI through 3.2, ndpiresetpacketlineinfo in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.
{ "urgency": "not yet assigned" }