remctld in remctl before 3.14 when an attacker is authorized to execute a command that uses the sudo option has a use-after-free that leads to a daemon crash memory corruption or arbitrary command execution.