Function call chaining via objectManager destructor

Integer overflow creating massive oob

UAF on FILE pointer

vtable hijack

Getting around randomized freelist and freelist pointer hardening

CVE-2021-31439

Reverse PRNG and hijack abs.got to pivot into ropchain

Hijacking DL_CALL_DT_FINI macro to call one_gadget

Hijacking socket to overtake permission daemon

OOB access and race condition in kernel module