About me
I'm a Security Researcher skilled in Vulnerability Research, Reverse Engineering, Mobile Security, IoT Security, and Automated Security Testing. My research interests are in Systems Security and Automated Program Analysis. These days my focus is shifting toward automated security analysis of AI agents: adapting program analysis, testing, and adversarial-intelligence techniques to discover unsafe agent behavior.
Security advisory credits
-
Improper Array Index Validation in DB Unregistered Options parsing Leads to unreleased lock and Denial of Service
National Security Agency's Ghidra before 12.1.4 fails to validate the TYPE_COL byte in OptionsDB.createUnregisteredOption(), causing an ArrayIndexOutOfBoundsException that leaves domain objects permanently locked. Attackers can craft a malicious program database file that, when imported, causes the application to stall and prevents resource cleanup or graceful shutdown.
-
OSV-SCALIBR has NULL Pointer Dereference
A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.