All issues

Search results

Global heap without process isolation

Status: Open.

#67In viralcode/vib-OS;

· CupCupRay opened on Apr 22, 2026

Predictable ISN + ARP poisoning + TCP underflow

Status: Open.

#66In viralcode/vib-OS;

· CupCupRay opened on Apr 22, 2026

is_valid_user_ptr (kernel/syscall/syscall.c) has an overly narrow blacklist, while sys_sound_play allows arbitrary reads

Status: Open.

#65In viralcode/vib-OS;

· CupCupRay opened on Apr 22, 2026

The ELF loader (kernel/loader/elf.c) has no target address verification, allowing arbitrary kernel writes

Status: Open.

#64In viralcode/vib-OS;

· CupCupRay opened on Apr 22, 2026

issue running the built OS

Status: Open.

#62In viralcode/vib-OS;

· donjamies1234567890 opened on Mar 14, 2026

create-boot-image.sh fails on Linux: macOS-only tools + invalid dd usage

Status: Open.

#58In viralcode/vib-OS;

· hemanthshashidhar opened on Jan 25, 2026

DNS: Compression pointers are not validated for range or loops

Status: Open.

#57In viralcode/vib-OS;

· braindigitalis opened on Jan 24, 2026

DNS: Name skipping logic can walk arbitrarily far on malformed labels

Status: Open.

#56In viralcode/vib-OS;

· braindigitalis opened on Jan 24, 2026

DNS: Critical out-of-bounds read in the question skip loop

Status: Open.

#55In viralcode/vib-OS;

· braindigitalis opened on Jan 24, 2026

x86_64 cmpxchgl constraints are odd and easy to miscompile

Status: Open.

#54In viralcode/vib-OS;

· braindigitalis opened on Jan 24, 2026

ARM64: sevl / wfe usage can hang indefinitely

Status: Open.

#53In viralcode/vib-OS;

· braindigitalis opened on Jan 24, 2026

atof() is not an atof() (parses integers only)

Status: Open.

#51In viralcode/vib-OS;

· braindigitalis opened on Jan 24, 2026