It’s use-after-free where the “use” is execution of arbitrary code. Yeah, that’s pretty bad.