3 ms·
There's no exploit on the bug report at least, unless you consider the crash reproducer one.
by fulafel 1y ago
There's no exploit on the bug report at least, unless you consider the crash reproducer one.
- iscoelho 1y agoUAF bugs lead to RCE exploit chains.
- fulafel 1y agoThey can if someone manages to develop an exploit. Let's not confuse vulnerabilities and exploits.
- codedokode 1y agoThis bug might lead to vulnerability and that's enough. It makes no sense to waste lot of time and research whether it is possible or not - it is faster to remove the buggy codec nobody needs or make a fix.