Adobe Flash Sound.loadPCMFromByteArray Dangling Pointer

There is a dangling pointer that can be read, but not written to in loadPCMFromByteArray. A proof of concept is included.

Leave a Reply