Project Zero Bugs

A bot that posts the latest blog posts and disclosures from Google's Project Zero

[Project Zero Bugs @ProjectZeroBugs]

VirtualBox: COM RPC Interface Code Injection Host (Insufficient Fix) EoP https://t.co/EaO7wX13BQ

[Project Zero Bugs @ProjectZeroBugs]

VirtualBox: VBoxWDDM VidPnSourceId Kernel Memory Corruption EoP https://t.co/zjwSF1i7KE

[Project Zero Bugs @ProjectZeroBugs]

VirtualBox: OnSerialPortChange COM Object Interop Process Hardening Bypass EoP https://t.co/b5xz7LSoTq

[Project Zero Bugs @ProjectZeroBugs]

VirtualBox: IDispatch COM Object Interop Process Hardening Bypass EoP https://t.co/n9G3lQ3gof

[Project Zero Bugs @ProjectZeroBugs]

VirtualBox: .NET FlatImageLayout Process Hardening Bypass EoP https://t.co/wmbF1e7nOO

[Project Zero Bugs @ProjectZeroBugs]

Samsung https://t.co/cA0nm6GwUT: Heap Buffer Overflow (OOB Write) in Subtitle Charset Conversion (SubtitleSource::read) https://t.co/NRc3Hpildg

[Project Zero Bugs @ProjectZeroBugs]

Samsung: https://t.co/FgEudFYExu Out-of-Bounds Write in Progressive JPEG Inverse-DCT from a Scan/Frame Component-Index Mismatch https://t.co/3qrua2KEPY

[Project Zero Bugs @ProjectZeroBugs]

Samsung: https://t.co/FgEudFYExu Heap Buffer Overflow in DNG Uncompressed Tile Decoding (QuramDngReadImage::readUncompressed) https://t.co/7r1l1n28gN

[Project Zero Bugs @ProjectZeroBugs]

How to fix a bug in a fix https://t.co/E2CgPslONs

[Project Zero Bugs @ProjectZeroBugs]

Samsung sgpu: sgpu_gem_create() calls sgpu_swap_add_bo() on dangling BO https://t.co/VV62hSL6j3

[Project Zero Bugs @ProjectZeroBugs]

Windows Exploitation Techniques: Dangling COM Object Registrations https://t.co/FKavVm4zfp

[Project Zero Bugs @ProjectZeroBugs]

Windows: CrossDevice Dangling COM Registration Incomplete Fix EoP https://t.co/VZ6r23dRu2

[Project Zero Bugs @ProjectZeroBugs]

Testing race conditions with memory access tracing and stack-based delay injection https://t.co/CQ1yh8lE5E

[Project Zero Bugs @ProjectZeroBugs]

PowerVR: PVRSRV_MEMALLOCFLAG_OS_LINUX_PREFER_CMA PMR allocations with a large page size causes page allocator corruption https://t.co/y8ER8vnrAh

[Project Zero Bugs @ProjectZeroBugs]

Linux: fork() failure path tries to clean up BPF task storage that was never initialized, leading to UAF https://t.co/nMGggQSmlD

[Project Zero Bugs @ProjectZeroBugs]

aoc: Type Confusion in aoc_unlocked_ioctl_handle_ion_fd https://t.co/rlYbkCrwmA

[Project Zero Bugs @ProjectZeroBugs]

LWIS kernel driver OOB write in lwis_io_buffer_write https://t.co/H1C0rTwuT1

[Project Zero Bugs @ProjectZeroBugs]

fuse: uninitialized folio read via FUSE_NOTIFY_RETRIEVE on !uptodate pages https://t.co/iRctaQ2oti

[Project Zero Bugs @ProjectZeroBugs]

Linux 7.0: vfs_open_tree(OPEN_TREE_NAMESPACE) accepts regular files, so cwd can be a regular file https://t.co/cCPgMznrFC

[Project Zero Bugs @ProjectZeroBugs]

Pixel Codec3P VPU driver: lifetime issues with fw_debug_buf https://t.co/S81aU3jaRj