Collected research
Uninitialized Memory Disclosures in Web Applications
Image libraries and similar parsers can pad their output with uninitialised heap memory when fed malformed input, so a picture processed and returned by a web application carries fragments of server memory such as credentials or pointers. The post introduces a paper on detecting the bug class and releases test images and tooling for it.
Record
- Researcher
- @SilentSignalHU
- Published by
- Silent Signal Techblog
- Date
- Topic
- Other
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of @SilentSignalHU, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .