UAF bugs lead to RCE exploit chains. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		iscoelho 32 days ago \| parent \| context \| favorite \| on: FFmpeg to Google: Fund us or stop sending bugs UAF bugs lead to RCE exploit chains.

fulafel 32 days ago [–]

They can if someone manages to develop an exploit. Let's not confuse vulnerabilities and exploits.

codedokode 32 days ago | [–]

This bug might lead to vulnerability and that's enough. It makes no sense to waste lot of time and research whether it is possible or not - it is faster to remove the buggy codec nobody needs or make a fix.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact