202 - A SNIProxy Bug and a Samsung NPU Double Free [Binary Exploitation Podcast]

Just a few bugs this week, a classic buffer overflow because of an unbounded copy in SNIProxy. mast1c0re Part 2 with a few more easy vulnerability but some more complex and difficult exploitation. And a Samsung NPU in-the-wild double free.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/202.html

[00:00:00] Introduction
[00:00:24] Spot The Vuln - Operational Set
[00:03:37] SNIProxy wildcard backend hosts buffer overflow vulnerability
[00:08:17] mast1c0re Part 2 - Compiler Attack
[00:21:46] Samsung NPU device driver …

analysis android attack backend binary binary exploitation buffer buffer overflow buffer overflow vulnerability bug bugs codeql compiler copy cve device driver exploitation free fundamentals hero introduction operational overflow podcast samsung static analysis vuln vulnerability