Adobe Flash Sound.setTransform Use-After-Free
Posted by deepcore on December 19, 2015 – 9:56 pm
There is a use-after-free vulnerability in Sound.setTransform. If a transform value is set to an object with valueOf defined, it can free the transform before the values are set.
Post a reply
You must be logged in to post a comment.