News for hackers. Stuff that matters.
Re:The Bogus CVE Problem by worthless-trash on Friday September 22, 2023 @08:02AM (#37610863)
OOB read allows an attacker to measure internal status such as stack status, and memory allocator status, this widget along with another flaw makes exploits much more reliable.

You -can- definitely do bad things with the data gained from it.

For the memory allocator data, read up on the "house of" attacks against glibc's allocator.

There are no comments on this comment yet.