@Spartan_1986@infosec.exchange This is largely consistent with what we've seen as well. The trick is exploitation beyond crashing requires specific offsets per PHP version, along with figuring out heap layout. And it's not a sure thing.