diff options
| author | Tamás Koczka <poprdi@google.com> | 2026-01-26 15:21:51 +0100 |
|---|---|---|
| committer | Taras Madan <tarasmadan@google.com> | 2026-01-26 18:17:59 +0000 |
| commit | efb3e894dd7e30475c92970989c58e5aad3d5e7b (patch) | |
| tree | d921a4ae002c4cff6c9465b5423dc261cfb471ff /pkg/aflow/tool/codeeditor | |
| parent | 3d100869856aed9bca7cac3ab7c9c162b9fee802 (diff) | |
pkg/report: double-free is at least as severe UAF write
Double-free is at least as severe as a UAF write because in case of UAF write, the vulnerable object is given and
you have to find the right victim object - the writable offset and size needs to match.
In case of double-free you can choose both your victim and attacker object, giving more options for a successful
exploitation (there are attacker objects which can basically write all offset and sizes).
This assumes that double-free is controlled in a way that the attacker can spray a victim object between the two
`kfree()`s.
Diffstat (limited to 'pkg/aflow/tool/codeeditor')
0 files changed, 0 insertions, 0 deletions
