Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore.
☆18Feb 1, 2026Updated 8 months ago
Alternatives and similar repositories for CVE-2025-43529
Users that are interested in CVE-2025-43529 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- SEP firmware panic via AppleKeyStore - iOS/macOS 26.x kernel vulnerability☆31Aug 27, 2026Updated 2 months ago
- IOGPUFamily bitmap_mask underflow → kernel heap OOB write. First public PoC. Original discovery by Wang Yu of Cyberserval.☆23Mar 18, 2026Updated 7 months ago
- exploit for cve-2025-43529☆87Jan 5, 2026Updated 9 months ago
- WebKit NavigateEvent.canIntercept SOP bypass via cross-port interception — iOS 26.3.1 BSI (CVE-2026-20643)☆21Jun 28, 2026Updated 4 months ago
- ☆17May 26, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- XNU AIO kevent use-after-free — kernel panic from app sandbox on iOS 26.2 (no entitlements). Patched in iOS 26.3☆28Mar 21, 2026Updated 7 months ago
- ☆41Feb 28, 2026Updated 8 months ago
- ☆19Nov 26, 2024Updated last year
- ☆55Oct 22, 2025Updated last year
- CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC…☆28Aug 27, 2026Updated 2 months ago
- ☆37Apr 14, 2025Updated last year
- my try at recreating and exploiting some v8 CVEs☆22Oct 3, 2025Updated last year
- Fugu17 for iOS 17 is a semi-untethered jailbreak for iOS 17.0 - 17.1☆11Jan 18, 2025Updated last year
- ☆54Feb 25, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)☆58Aug 27, 2026Updated 2 months ago
- PoC for iOS, macOS, iPadOS (DoS)☆16Jan 14, 2022Updated 4 years ago
- Integer overflow in FreeType software, which also affects Chrome☆31Jul 14, 2026Updated 3 months ago
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 4 months ago
- A critical RCE vulnerability in Windows TCP/IP stack (CVE-2025-26686) leaves sensitive memory unlocked, allowing remote attackers to hija…☆33Sep 16, 2025Updated last year
- Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6☆98Jul 21, 2022Updated 4 years ago
- This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-…☆17May 18, 2026Updated 5 months ago
- Exploit code for CVE-2023-42914 / pwn2own Vancouver 2023☆16Nov 22, 2024Updated last year
- CVE-2024-44258☆87Nov 2, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- An uninitialized read vulnerability by incorrect Turboshaft Store-Store Elimination in V8.☆30Jan 29, 2026Updated 9 months ago
- ☆15Aug 6, 2026Updated 2 months ago
- Some V8 n-day exploits that I've written☆64Jun 7, 2026Updated 4 months ago
- Example of CVE-2022-46689 aka MacDirtyCow.☆14Mar 1, 2023Updated 3 years ago
- A collection of Apple-related CTF writeups☆17Jan 17, 2022Updated 4 years ago
- ☆17Jan 31, 2023Updated 3 years ago
- CVE-2026-43724 - Apple's published enough advisories about the issue, I'm not getting paid for any of my kernel bugs.☆23Jul 13, 2026Updated 3 months ago
- Demo of using System Shell private API to render view over SpringBoard☆18Sep 16, 2024Updated 2 years ago
- ☆13Mar 31, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Pishi is a code coverage tool like kcov for macOS.☆77Aug 18, 2026Updated 2 months ago
- Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari☆113Aug 27, 2026Updated 2 months ago
- ☆22Mar 6, 2023Updated 3 years ago
- AppleKeyStoreUserClient close() UAF — PoC + diff analysis (bug found/patched by unknown third party in iOS 26.3 RC, not my discovery)☆29Aug 27, 2026Updated 2 months ago
- A small Windows local-privilege-escalation (LPE) misconfiguration auditor with a terminal UI, built with C++20 and FTXUI☆16Updated this week
- Some papers and exploit writeups about WebKit.☆21Feb 18, 2024Updated 2 years ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆16Jul 27, 2026Updated 3 months ago