TLDR: glibc 2.32, <= 0xd8 allocations, double blind small poison null byte into house of rust single stash variation

Original writeup (https://gist.github.com/c4ebt/0834b3dbd7e00f65bf0726580207871c).