The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) lies in the use of memory after deallocation during the processing of specially created VVC streams. This allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow a hacker to cause a service failure or execute arbitrary code...

The vulnerability of the readAlf function in the vvdecapp (VVdeC) decoder allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the reconstructCoeff function in the vvdecapp decoder (VVdeC) allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the reconstructCoeff function in the vvdecapp VVdeC decoder is related to the use of memory after deallocation when processing specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the `createSubPicRefBufs` function in the vvdecapp (VVdeC) decoder allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-98333

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. When bringing up a wireless interface fails, the system does not reset the radio LED state, leaving an internal throughput timer running. Consequently, when the wireless device is subsequently removed or unregistered,...

Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...

CVE-2026-43499-aristotle-apk

Aristotle ADB 有効化 「開発者向けオプション」に到達できない au/KDDI Xiaomi "aristotle" XIG04, Android 12 で、CVE-2026-43499 から取得した一時的な root を利用して ADB を有効にする、最小限の Android アプリです。KingRoot と同じカテゴリのデバイスオーナーツールであり、自分のスマートフォンを root 化して設定を 1 つ切り替えるためのものです。 対象範囲: 以下の ROM を実行している自分所有の XIG04...

CVE-2024-27398

CVE-2024-27398 CVE-2024-27398 PoC 📍 GDB 중단점 GNU gdb Ubuntu 12.1-0ubuntu122.04.2 12.1 Copyright C 2022 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law...

CVE-2026-43499-Redmi-Turbo5

CVE-2026-43499 Exploit for Redmi Turbo 5 이 프리로드 라이브러리는 duchamp-root 소스 코드를 기반으로 빌드되었습니다. ⚠️ 경고: 교육 및 승인된 보안 연구 목적으로만 사용하십시오. 이 저장소는 Xiaomi Redmi Turbo 5 기기를 대상으로 하는 CVE-2026-43499GhostLock에 대한 개념 증명 익스플로잇을 제공합니다. 이 익스플로잇은 Linux 커널의 futex PI우선순위 상속 requeue 경로에 있는 use-after-free 취약점을 활용하여 부트로더를 잠금...

CVE-2026-64560-Analysis

CVE-2026-64560 — Linux Kernel posix-cpu-timers non-leader exec 경쟁 조건 UAF Reproducer / PoC트리거 검증형 : Linux & Android NDK 본 저장소는 자체 테스트 기기 에서 패치 상태를 검증하고 연구/학습 목적으로만 제공되며, 권한 상승/익스플로잇 프리미티브를 포함하지 않습니다. 1. 취약점 개요 필드| 내용 ---|--- CVE ID| CVE-2026-64560 제목| posix-cpu-timers: Prevent UAF caused by...

CVE-2026-43499-S24U

Galaxy S24 UltraSM-S928U1용 CVE-2026-43499 펌웨어 S928U1UES6DZF2 를 실행하는 미국 Samsung Galaxy S24 Ultra를 위한 공개 소스 기반, 기기별 구현입니다. 지원 대상 Model: SM-S928U1 Codename: e3q Build / AP: S928U1UES6DZF2 / S928USQS6DZF2 Kernel: 6.1.145-android14-11-33419968-abS928USQS6DZF2 Architecture: arm64, 4K pages 대상 프로필은 펌웨어별...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q 부트로더 언락 없이 KernelSU Root CVE-2026-43499 임시 root → LDPRELOAD 채널로 DEFEX 우회 → LTO 없는 clang-12 버전 kernelsu.ko → su + KernelSU Manager 전체 기능 상태: ✅ 2026-08-12 실기기 검증 달성 펌웨어 F9360ZCSAIZF1, 커널 5.10.236-android12-9-2755199-abF9360ZCSAIZF1 본 프로젝트는 Bootloader 잠금 상태의 삼성 기기에서...

CVE-2025-47917

CVE-2025-47917 Exploit mbedTLS의 Use-After-Free 저자 : Byte Reaper 텔레그램 : @ByteReaper0 CVE : CVE-2025-47917 취약점 : mbedTLS 3.6.4 이름 구문 분석의 Use-After-Free UAF 설명 이 저장소는 mbedTLS 라이브러리의 mbedtlsx509stringtonames 이름 구문 분석 함수에서 발생하는 Use-After-Free 취약점을 대상으로 한 익스플로잇을 포함합니다. 성공적인 익스플로잇은 해제된 힙 메타데이터를 가로채고 제어...

CVE-2026-98320

A flaw was found in the Linux kernel's netfilter subsystem. In the flowtable component, connection tracking reference counts are prematurely released before flow entries are fully removed from memory. An attacker could exploit this timing issue during network flow processing, triggering a...

mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE

CVE-2025-47175 - Microsoft PowerPoint 해제 후 사용UAF 원격 코드 실행 PoC 개요 이 저장소는 Microsoft PowerPoint에서 발견된 CVE-2025-47175 취약점에 대한 PoC개념 증명 익스플로잇을 포함합니다. 이 취약점은 UAF해제 후 사용 버그로, 공격자가 사용자가 특수하게 제작된 PPTX 파일을 열도록 속여 임의 코드를 실행할 수 있게 합니다. 설명 취약점: Microsoft PowerPoint의 UAF해제 후 사용 CVE ID: CVE-2025-47175 영향받는 버전:...

CVE-2022-0324

cve-2022-0324 https://ngtuonghung.github.io/pwn/cve-reproduction/cve-2022-0324/...

oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux 커널 권한 상승 연구 프로젝트 개요 GhostLock CVE-2026-43499은 Linux 2.6.39부터 7.1-rc1까지 영향을 주는 커널 스택 UAF 취약점으로, FUTEXCMPREQUEUEPI 경쟁 조건을 통해 트리거됩니다. 이 프로젝트는 NebuSec/CyberMeowfia의 x8664 익스플로잇을 OPPO Find N2 ARM64, kernel 5.10.236에 포팅합니다. 프로젝트 상태 개발 진행 중 — ...