[a1369209993]

If the attacker can write to string memory, they can overwrite "%s\n\0Hello World" just as easily as "Hello World\n".