Life After the Isolated Heap
Project Zero's Natalie Silvanovich analyzed how Adobe's Isolated Heap, which partitions Flash's MMgc heap into three areas to separate objects likely to contain corruption bugs from objects useful for exploiting them, affected exploitability of two bugs...