Daily Archives: 2023-03-29

H26Forge: Exploiting Vulnerabilities in the H.264 Decoders of iOS, Firefox, VLC [pdf]

Source: Hacker News

Article note: The design of the domain specific Fuzzer is really cool. The profusion of exploitable edge cases part of video decoding is ...obvious in retrospect, but it's such a big space it's actually hard to explore.
Posted in News | Leave a comment