Rating: 5.0

Exploit minor bug to UAF, then use fastbins to tcache poison to achieve a write.

Original writeup (https://github.com/joshdabosh/writeups/tree/master/2020-InCTF).