TLDR Tech / Practical
WordPress libheif RCE: An Exploit Chain
Researchers published an end-to-end remote code execution exploit chain targeting a heap overflow vulnerability in libheif via authenticated WordPress image uploads. The exploit uses file-controlled heap overflows and memory address disclosures from WordPress image derivatives to hijack C++ virtual calls and achieve remote code execution as the PHP-FPM user. The technique successfully executed commands across tested Ubuntu and Debian environments while requiring exact build profiling.
Read the full story