A heap UAF in NASM response file parser leads to fully deterministic, persistent RCE via supply-chain attack, bypassing all memory protections.