Skip to content

Guides tagged: #double-free

0x7000 · Exploitation Techniques

Heap Exploitation: tcache and Use-After-Free

The heap's own metadata is the write primitive. Build a use-after-free, poison the glibc tcache to allocate a chunk over a chosen address, and see why safe-linking and ASan raise the bar.

0x1000 · Vulnerability Classes

Heap Overflows, Use-After-Free and Double Free

How heap memory bugs corrupt allocator metadata and object state, why use-after-free is so dangerous, and the allocator hardening, sanitizers and ownership rules that stop them.