I have a feeling you already know about it, but for others that really enjoy reading these kinds of exploits, the "underhanded C contest"[0] is fantastic reading material that will give you very similar feelings.

It's terrifying how even simple code can hide extremely bad exploits. Many of the entries even follow every linter/compiler warning/best practice out there.

[0] http://www.underhanded-c.org/