RC RANDOM CHAOS

denial of service

2 posts

Forty lines freeze your Mac
Article

Forty lines freeze your Mac

How the Deathray technique lets an untrusted website freeze an entire Mac by overloading WindowServer, why the browser sandbox can't stop it, and what to do.

Your image parser is a remote kill switch
Article

Your image parser is a remote kill switch

Codex Micro's unvalidated image upload endpoint decodes attacker-controlled rasters in-band with a check-then-act race, enabling CWE-400/CWE-770 resource exhaustion.