Comment by rightbyte

How can a read overflow or a double free cause remote code execution?