Vulnerability Research

• April 27, 2025

  Analyzing a Modern Linux Kernel Vulnerability (CVE-2023-0266)

  Deep dive into CVE-2023-0266, a race condition vulnerability in the Linux kernel sound subsystem that was exploited in-the-wild against Android devices. Exploring the technical details of how 32-bit/64-bit compatibility layers introduced a use-after-free condition.

  #linux-kernel #vulnerability-research #exploit-dev #use-after-free #cve-analysis
  read more →
• April 26, 2024

  Local Privilege Escalation Vulnerability in Ant Media Server (CVE-2024-32656)

  Disclosure of a local privilege escalation vulnerability in Ant Media Server arising from an unauthenticated JMX remote management interface accessible to unprivileged local users, enabling code execution as root.

  #vulnerability-research #cve-analysis #privilege-escalation #jmx
  read more →