Linux Heap TCache Poisoning

Linux Heap TCache Poisoning

In this paper, I introduce the reader to a heap metadata corruption against the current Linux Heap Allocator, ptmalloc. The attack is performed via corrupting, or poisoning the tcache such that malloc returns an arbitrary pointer. This may allow for control flow hijacking if malloc returns a pointer to a function pointer and an attacker is able to write to that malloc returned buffer. TCache poisoning is possible from heap corruption including buffer overflows and Use-After-Frees.

Linux Heap TCache Poisoning.PDF


  1. We at
    my assignment expert provide all assignment help to students to overcome their fear to
    become better and score better grades. Our expert team possesses expertise in all the study
    areas and they are highly qualified experts.


Post a Comment

Popular posts from this blog

Linux Kernel Infoleaks