Connect and corrupt: C++ coroutines prone to code-reuse attack despite CFI
cispa.de
A code-reuse attack named Coroutine Frame-Oriented Programming (CFOP) is capable of exploiting C++ coroutines across three major compilers, namely Clang/LLVM, GCC and MSVC.