Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Effective Fuzzing: A Dav1d Case Study

projectzero.google | blog | #memory-safety | #fuzzing | #case-study | #dav1d | #av1 | #codec

Summary

A case study on effective fuzzing of dav1d, the open-source AV1 decoder, covering harnessing decisions, coverage strategy, and lessons for hunting codec vulnerabilities.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
MTE As Implemented, Part 2: Mitigation Case Studies
Part 2 of the MTE As Implemented series, presenting case studies of how Memory Tagging Extension mitigates real memory corruption exploits and where attackers might adapt.
blog · projectzero.google
On the Effectiveness of Mutational Grammar Fuzzing
A Google Project Zero study examining how effective mutational grammar-based fuzzing is at finding software vulnerabilities.
blog · projectzero.google
The Windows Registry Adventure #7: Attack surface analysis
Part 7 of the Windows Registry Adventure series, mapping which Windows components parse registry data and identifying the most promising attack surface for deeper research.
blog · projectzero.google
Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages
Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.
blog · projectzero.google
Blasting Past Webp
A deep dive into WebP image parsing and libwebp exploitation, tracing how memory corruption in the codec can be weaponized and why it became such a widely targeted surface.
blog · projectzero.google
Simple macOS kernel extension fuzzing in userspace with IDA and TinyInst
A practical recipe for fuzzing macOS kernel extensions in userspace by combining IDA-assisted harnessing with TinyInst, lowering the cost of finding driver bugs.
back