Adobe Flash Color.setTransform Use-After-Free

If Color.setTransform in Adobe Flash is set to a transform that deletes the field it is called on, a use-after-free occurs.

Leave a Reply