From what I understand, the basis of the exploit is from Project Zero work[1]. Forbes also has a minimal write-up that might be easier to grok[1], but it's bee

From what I understand, the basis of the exploit is from Project Zero work[1]. Forbes also has a minimal write-up that might be easier to grok[1], but it's been long enough that I imagine you've gotten additional info already... 1: https://googleprojectzero.blogspot.com/2020/04/fuzzing-imageio.html https://googleprojectzero.blogspot.com/2020/04/fuzzing-image... 2: https://www.forbes.com/sites/forbes-personal-shopper/2020/05/06/duck-rabbit-book-meghan-markle/#35a374435be2 https://www.forbes.com/sites/forbes-personal-shopper/2020/05...