App - System

Hello.
I’m trying to solve "logic bug" in system.
I tried to heap overflow and uaf.
But, I have no idea.
Do you guys any hints?
I think the vulnerabilities are in realpath, strdup, and Malloc.
In addition, the "\n" of fgets is also strange.
Please help.
Thank you.