FYI, the CVE linked to is for an ASLR bypass that could not be used to exploit anything by itself (only assist other exploits). Though I don't want to impugn w

FYI, the CVE linked to is for an ASLR bypass that could not be used to exploit anything by itself (only assist other exploits). Though I don't want to impugn without data, this suggests that you may be jumping to conclusions based on published security advisories; I'd try to be careful about that, as you could be missing the actual attack vector.