I think it's supposed to be use after free, but it isn't clear because none of the others use that layout
For those who don't know: "use after free" is a programming term that means you tried to use something that was stored in a certain place in memory after that thing was already freed (removed from that space in the memory). As a result, you get unexpected behavior. This can be exploited to allow an attacker to get a program to run anything they want.
I think it's supposed to be use after free, but it isn't clear because none of the others use that layout
For those who don't know: "use after free" is a programming term that means you tried to use something that was stored in a certain place in memory after that thing was already freed (removed from that space in the memory). As a result, you get unexpected behavior. This can be exploited to allow an attacker to get a program to run anything they want.