I had the same question about the actual exploit on another thread: https://news.ycombinator.com/item?id=50319143

It’s only recently I realised that a lot of this very clever vulnerabilities are often not actually exploitable, except in quite specific conditions.