Comment by stephenlf

21 hours ago

Crap

Given it relies on ASLR being disabled, it's extremely unlikely you're at any risk from this.

  • The exploit they chose assumes ASLR is disabled for simplicity's sake, but if you read the full writeup they say they could've used the vulnerability to map memory layout. It's nice to have ASLR but some types of vulnerabilities can be used to bypass it.