%n has frequently been used as an attack vector - generally in the context of the other poor practice of printf(<attacker controlled string>, ...) It’s actuall

%n has frequently been used as an attack vector - generally in the context of the other poor practice of printf(<attacker controlled string>, ...) It’s actually intentionally disallowed in some libc implementations.