RC RANDOM CHAOS

race condition

2 posts

Your image parser is a remote kill switch
Article

Your image parser is a remote kill switch

Codex Micro's unvalidated image upload endpoint decodes attacker-controlled rasters in-band with a check-then-act race, enabling CWE-400/CWE-770 resource exhaustion.

 Steam's I/O thread is holding a dead pointer
Article

Steam's I/O thread is holding a dead pointer

Transport-layer race condition in Valve's GameNetworkingSockets creates a remote UAF primitive that sits below session crypto and evades EDR telemetry.