[capitainenemo]

Is there any evidence that the config files had arbitrary code in them? The only analysis I'd seen so far indicated a parsing error loading a viral signature database that was routinely updated, but in this case was full of garbage data.

[benfortuna]

Perhaps not verified, but some smart people do have convincing arguments:

https://youtu.be/wAzEJxOo1ts?si=UNNxAN27VV1E6mcP&t=505

[capitainenemo]

Any article/blog/text-that-can-be-read?

[alecco]

Don't bother. He just repeats a tweet saying a null+offset dereference and also the speculation of that null picked from the sys file.