David Korczynski

FFmpeg through 9.0.2 Out-of-Bounds Heap Read via TDSC Cursor Dimensions

TLS Hostname Verification Falls Back to CN After SAN Mismatch

A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. This occurs when auto-fragmentation is enabled, as unknown op

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer