On: Remote code execution affecting most iOS/macOS apps

[diamondo25]

When this happens, you can override the stack. As variables are pushed on the stack, you can influence the execution of the program, for example return address. This can be exploited using ROP (Return Oriented Programming) and then you've got full control.

[waynecochran → diamondo25]

This isn't always possible in practice and the article never suggests anything worse than crashing the app or preventing it from running.

[mark4o → waynecochran]

In https://support.apple.com/en-us/HT207617 Apple admits that this may lead to arbitrary code execution.

[kenferry → diamondo25]

How do you override the stack without writes?