4 ms·

Can someone please explain how exactly this is ACE?

• saagarjha 8y ago
  It's a use-after-free, which can often be turned into arbitrary code execution by massaging the allocator into letting you write over memory you shouldn't be able to (like a function pointer) and using that to gain control over execution.