186 - An XNU Exploit and a Chrome Heap Overflow [Binary Exploitation Podcast]

First, we take a look at some positive changes to OSS Fuzz, then we dive into some vulnerabilities. This includes an XNU heap out-of-bounds write vulnerability, a Chrome heap-based overflow vulnerability, and an out-of-bounds read in cmark-gfm that, while probably not exploitable, is still intriguing.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/186.html

[00:00:00] Introduction
[00:00:22] Spot the Vuln - The Great String Escape
[00:03:03] Taking the next step: OSS-Fuzz in 2023
[00:09:48] XNU Heap Underwrite in …

binary binary exploitation chrome dive escape exploit exploitation fuzz great introduction oss oss-fuzz out-of-bounds out-of-bounds write overflow podcast vuln vulnerabilities vulnerability