CVE-2026-5281-CVE-2026-11057-fullchain

CVE-2026-5281+CVE-2026-11057 Android fullchain Device Pixel 7 Android 16 ARM64 Chromium version commit 994c846bbd7a35241ba7c08158c13d66412a6993 HEAD - 146.0.7680.111, tag: 146.0.7680.111 Author: Roger McFarlane Date: Mon Mar 9 12:48:07 2026 -0700 Description Exploitation approach This repository...

Virtuailor

Virtuailor - IDAPython 도구로 C++ vtable 재구성하기 Virtuailor는 인텔 아키텍처32비트 및 64비트 코드와 AArch64신규!용 C++ 코드의 vtable을 재구성하는 IDAPython 도구입니다. 이 도구는 정적static 부분과 동적dynamic 부분, 두 부분으로 구성됩니다. 첫 번째는 정적 부분으로, 다음 기능을 포함합니다: 간접 호출indirect call을 탐지합니다. 조건부 중단점conditional breakpoint을 사용하여 간접 호출의 값 할당을 후킹합니다후크 코드. 두 번...

COM-Code-Helper

COM-Code-Helper 두 개의 IDAPython 스크립트가 Microsoft COMComponent Object Model 코드 재구성을 도와줍니다. 특히 악성코드 분석가에게 유용할 것입니다. COM 코드는 여전히 악성코드에서 자주 발견되기 때문입니다. ClassAndInterfaceToNames.py 이 IDAPython 스크립트는 idb 파일에서 클래스 및 인터페이스 UUID를 스캔하여 일치하는 구조와 이름을 생성합니다. interfaces.txt + classes.txt가...

CVE-2026-48095

CVE-2026-48095 7-Zip は高圧縮率のファイルアーカイバです。バージョン 26.00 およびそれ以前には、NTFS 圧縮ストリームバッファ（GetCuSize shift UB）の過小割り当てに起因するヒープバッファオーバーフローの脆弱性が存在し、攻撃者が任意のコード実行やアプリケーションクラッシュを引き起こす可能性があります。 NTFS ハンドラの CInStream::GetCuSize は、圧縮ユニットバッファサイズを UInt321 = 28 かつ CompressionUnit == 4 の細工されたイメージでは、指数が 32...

x86-cpp-reversing-skill

x86-cpp-reversing C++ からコンパイルされた 32 ビットリトルエンディアン x86 IA-32 バイナリおよび逆アセンブリをリバースエンジニアリングするための Claude Code スキル。ELF または PE バイナリからクラスレイアウト、vtable、仮想ディスパッチ、RTTI/継承階層を復元し、その構造を把握した後に発生するワークフロー -- カスタムファイルフォーマットの復元、データファイルのインデックス付きエントリをそれを使用するコード/エンティティにマッピングすること、そしてその過程で難読化やアンチデバッグのトリックを認識すること -- をカバーします...

SUSE CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

EUVD-2026-54280

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640 llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640 llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

CVE-2026-70640

llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench1model and free1context lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llamacontext. Attackers can explo...

JLSEC-2026-1095

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...

MariaDB: Out-of-bounds read in MariaDB .frm parsing enables RCE via vtable hijacking

A vulnerability was discovered in MariaDB where the keypart-fieldnr value parsed from a crafted .frm file was not validated before being used as an index into the share-field array. This resulted in an out-of-bounds read, allowing an attacker to hijack the C++ virtual method call and achieve...

CVE-2026-47178

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...

CVE-2026-47178

CVE-2026-47178 affects libheif up to v1.21.2, where a crafted uncompressed HEIF image (unci codec, tiled, component-interleaved, 4:2:0) can trigger a heap out-of-bounds write in the uncompressed tile decoder. The write overwrites a nearby C++ vtable pointer, causing the next virtual call to dispa...

EUVD-2026-46638

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...

CVE-2026-47178

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...

CVE-2026-47178: Out-of-bounds Write

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...