@Patricia @cupantaeconf

In 2010 Format String vuln relies on many features of printf

#CupanTaeConf

@Patricia @cupantaeconf

How to find it UB and integer Sanitizer

#CupanTaeConf

@Patricia @cupantaeconf

And in 2021
#CupanTaeConf

@Patricia @cupantaeconf

in 2002 we talked about buffer overflow and in 2017 ...

#CupanTaeConf

@Patricia @cupantaeconf

omg 😹 and oldie but a good one

#CupanTaeConf

@Patricia @cupantaeconf

How to find it ?

#CupanTaeConf #BadBinder

@Patricia @cupantaeconf

We can see the pattern of the vulnerability explained before

#CupanTaeConf

@Patricia @cupantaeconf

ooof! root exploit 💥

#CupanTaeConf #

@Patricia @cupantaeconf

in 2019 Bad Binder vulnerability.!
Binder is Android's IPC mechanism

#CupanTaeConf #Android #BadBinder