Improper allocation for invalid data leads to use-after-free.
CVE-2010-2547
certificate with a large number of Subject Alternate Names not properly handled in realloc, leading to use-after-free
CVE-2010-1772