As it is confirmed to be the ITW CVE-2022-24521, we also contributed the content to GP0 for interested folks
googleprojectzero.github.io/0days-in-the-w…
PixiePoint Security@pixiepointsec
RCA for 1 of the 2 CLFS bugs patched in April 2022. While we can't determine the CVE, we did managed to exploit it ;) ... credit: @b1thvn_ pixiepointsecurity.com/blog/nday-cve-…
English