186 - An XNU Exploit and a Chrome Heap Overflow

First, we take a look at some positive changes to OSS Fuzz, then we dive into some vulnerabilities. This includes an XNU heap out-of-bounds write vulnerability, a Chrome heap-based overflow vulnerability, and an out-of-bounds read in cmark-gfm that, while probably not exploitable, is still intriguing.

binary-podcast chrome dive exploit fuzz hash-import-2023-02-16-04-52 oss out-of-bounds out-of-bounds write overflow podcast vulnerabilities vulnerability