Maher Azzouzi

[Maher Azzouzi @maherazz2]

@zippgod24 It’s no longer just report and they take care of it. now it’s report and convince 😂

[Maher Azzouzi @maherazz2]

Me: here is a stable OOB read/write vulnerability.

: duplicate of CVE-2026-XXXX.

Me: I reported CVE-2026-XXXX too. These are different bugs: different root causes and different vulnerability classes (UAF vs OOB r/w). I don’t think this is a duplicate.

: this ticket was closed because it was not reproducible on the latest branch used in our products.

Me: I can reliably reproduce it on the latest public iOS 26.5 beta. I also provided a video PoC.

: thank you for the additional info.

A few weeks later: we reproduced the issue and are planning to address it in Summer 2026... ¯\_(ツ)_/¯

[Maher Azzouzi @maherazz2]

Qualcomm mishandled my last report at first, but in the end they acknowledged the issue and paid the bounty. I reported a FastRPC UAF. Qualcomm said that they know about it but due to some internal tooling problems, the fix didn't reach all release branches for over a year.

[Maher Azzouzi @maherazz2]

Another AMDGPU bug I reported last year has been fixed: CVE-2025-54517 (CVSS 8.5).

One ioctl -> kernel compromise on AMD Instinct / Radeon PRO virtualization stacks.

May 2026 security bulletin:
https://t.co/tm8qf5fgC7

[Maher Azzouzi @maherazz2]

@bienpnn The same impact was done by many many vulnerabilities in the past this is nothing new

[Maher Azzouzi @maherazz2]

Apple fixed two vulnerabilities I reported affecting Safari/WebKit: CVE-2026-28953 and CVE-2026-28901. Sometimes mitigations can create new attack surfaces.

https://t.co/CHFAZQ3yLe

[Maher Azzouzi @maherazz2]

@IElmakhfi a bit busy khoya lwejdi 😄

[Maher Azzouzi @maherazz2]

Redis 👀

[Maher Azzouzi @maherazz2]

@stats_feed Memorize more of the Quran

[Maher Azzouzi @maherazz2]

@3zCS Thank you Abdulaziz!

[Maher Azzouzi @maherazz2]

Technical details for a kernel UAF vulnerability I reported earlier (analysis + PoC).

https://t.co/cxzYZapd63

[Maher Azzouzi @maherazz2]

@andersonc0d3 Thanks!

[Maher Azzouzi @maherazz2]

@Michaelelkamika Thank you! No fuzzing involved, all auditing.

[Maher Azzouzi @maherazz2]

Reported ZDI-CAN-28490 (CVSS 7.5). A Linux kernel bug in the ETS qdisc within the packet scheduler subsystem.

A logic flaw + race can leave a freed qdisc on an internal list, letting an unprivileged user trigger a UAF and gain kernel-level privilege escalation.

[Maher Azzouzi @maherazz2]

No more POC tickets? @POC_Crew. Wanted to visit this year’s edition, it seems im a bit late

[Maher Azzouzi @maherazz2]

AMD August 2025 Security Bulletins (AMD-SB-6018 and AMD-SB-5007) feature my discovery CVE-2024-36342, a heap overflow in the @AMD GPU driver, rated with the highest severity in AMD-SB-5007 and listed among the most severe vulnerabilities in AMD-SB-6018.

https://t.co/gVGxevtwkZ

[Maher Azzouzi @maherazz2]

@a13xp0p0v @PwnieAwards Thanks a lot for sharing, really appreciate your time, the blog, and all the effort you put into it!

[Maher Azzouzi @maherazz2]

@a13xp0p0v @PwnieAwards Thank you so much for clarifying! Just curious — was this always reliable for you, or did the interrupt sometimes miss the window? And when you say gradually increasing the timeout, was it in nanosecond-level steps?

[Maher Azzouzi @maherazz2]

@roddux Hello, yep i stumbled on the same off-by-one. Why this wasn't patched before btw? do you want to discuss it a bit?