Untitled attachment

Notices where this attachment appears

1. Embed this notice
   Azeria (azeria@mastodon.social)'s status on Wednesday, 13-Sep-2023 09:26:14 JST Azeria

   Time for an Arm-twist! CVE-2023-4039

   Tom Hebb (Meta red team) and I discovered an 0day in GCC (for AArch64 targets) during my Arm exploitation training.

   It renders stack canaries against overflows of dynamically-sized variables useless.

   https://developer.arm.com/Arm%20Security%20Center/GCC%20Stack%20Protector%20Vulnerability%20AArch64