From memory visualization to PHP source internals to exploit code. How two CVEs chain an OOM crash into RCE.