Tag
use-after-free
- Dec 4, 2025 Use-After-Free and the Reuse That Conceals It What a dangling pointer actually refers to after the object dies, why an immediate reuse so often makes the bug invisible, and how quarantine and poisoning change the diagnosis. memory systems
- Oct 4, 2025 Heap Chunk Metadata and Why tcache Changed the Exploit Shape How glibc lays out an allocated chunk, what the free-list pointers in a freed chunk mean, and how a per-thread cache with no consolidation turned a single overflow into an arbitrary allocation. security