Small & Large Bin Attacks

Sorted bins (small and large) have more complex metadata and stricter checks than fastbins, but offer powerful primitives once these checks are bypassed.

Technique	Description
House of Lore	Small bin BK pointer corruption for arbitrary allocation.
Large Bin Attack	Exploiting sorting logic to write heap addresses.

Table 1: Exploits targeting small and large sorted bins.

Unsafe Unlink

House of Lore