CVE-2020-17057

This is a proof-of-concept exploit for CVE-2020-17057, targeting a use-after-free vulnerability in the Windows DirectComposition API. The code demonstrates memory manipulation techniques to achieve pool feng shui and trigger the vulnerability, though it notes limitations in achieving arbitrary read/write primitives due to type isolation.

This PoC exploits CVE-2020-17057, a vulnerability in Windows DComposition, by manipulating channel batch buffers to trigger a use-after-free condition. The code demonstrates the vulnerability by creating resources and setting buffer properties in a loop to attempt exploitation.