There is a second use-after-free when executing multiple scripts similar to  issue 628  (https://code.google.com/p/google-security-research/issues/detail?id=628). 

This bug is subject to a 90 day disclosure deadline. If 90 days elapse
without a broadly available patch, then the bug report will automatically
become visible to the public.