Skip to content
View 0xjohnnydev's full-sized avatar
391 followers · 1 following

    Achievements

    Achievement: Pair ExtraordinaireAchievement: YOLOAchievement: Pull SharkAchievement: Starstruckx2

    Achievements

    Achievement: Pair ExtraordinaireAchievement: YOLOAchievement: Pull SharkAchievement: Starstruckx2

    Block or report 0xjohnnydev

    Block user

    Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

    You must be logged in to block users.

    Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
    Report abuse

    Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

    Report abuse

    Pinned Loading

    1. CVE-2026-20687-AppleJPEGDriver-UAFCVE-2026-20687-AppleJPEGDriver-UAFPublic

      CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)

      Objective-C 19 3

    2. CVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-ConditionsCVE-2026-28992-IOHIDFamily-FastPathUserClient-Race-ConditionsPublic

      UAF and AOP coprocessor panic in IOHIDEventServiceFastPathUserClient. No entitlements, reachable from app sandbox.

      Objective-C 14 3

    3. AppleKeyStore-close-UAFAppleKeyStore-close-UAFPublic

      AppleKeyStoreUserClient close() UAF — PoC + diff analysis (bug found/patched by unknown third party in iOS 26.3 RC, not my discovery)

      Objective-C 26 8

    4. SEP-Exhaustion-Kernel-PanicSEP-Exhaustion-Kernel-PanicPublic

      SEP firmware panic via AppleKeyStore - iOS/macOS 26.x kernel vulnerability

      Objective-C 28 5

    5. CVE-2026-20637-AppleSEPKeyStore-UAFCVE-2026-20637-AppleSEPKeyStore-UAFPublic

      CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)

      Objective-C 55 7

    6. WebKit-UAF-ANGLE-OOB-AnalysisWebKit-UAF-ANGLE-OOB-AnalysisPublic

      Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

      HTML 104 22