Trophies

Trophies of my bug hunting adventures

Android Bug Hunting

ID	Component	Link
CVE-2019-2017	NFC	https://source.android.com/security/overview/acknowledgements#mar-2019
CVE-2019-2027	Tremolo	https://source.android.com/security/overview/acknowledgements#apr-2019
CVE-2019-2034	NFC	https://source.android.com/security/overview/acknowledgements#apr-2019
CVE-2019-2099	NFC	https://source.android.com/security/overview/acknowledgements#june-2019
CVE-2019-2118	Binder	https://source.android.com/security/overview/acknowledgements#july-2019
CVE-2019-2135	NFC	https://source.android.com/security/overview/acknowledgements#august-2019
CVE-2019-2178	NFC	https://source.android.com/security/overview/acknowledgements#september-2019
CVE-2019-2187	NFC	https://source.android.com/security/overview/acknowledgements#october-2019
CVE-2019-2207	NFC	https://source.android.com/security/overview/acknowledgements#november-2019
CVE-2019-9358	NFC	https://source.android.com/security/overview/release-acknowledgements
CVE-2020-0050	NFC HCI	https://source.android.com/security/overview/acknowledgements#march-2020
CVE-2020-0216	NFC	https://source.android.com/security/overview/acknowledgements#june-2020
CVE-2020-11132	BOOT/UEFISECAPP	https://www.qualcomm.com/company/product-security/bulletins/november-2020-security-bulletin#_cve-2020-11132
CVE-2020-11293	Widevine TA	https://source.android.com/security/overview/acknowledgements#may-2021
CVE-2020-11304	Widevine TA	https://source.android.com/security/overview/acknowledgements#june-2021

Opensource Projects Bug Hunting

json.h

1. Heap Overflow in json.h(json_parse_key()) https://github.com/hyrathon/trophies/security/advisories/GHSA-r2mm-2f4c-6243

2. Heap Overflow in json.h(json_parse_number()) https://github.com/hyrathon/trophies/security/advisories/GHSA-r9wh-hxqh-3xq7

3. Heap Overflow in json.h(json_parse_value()) https://github.com/hyrathon/trophies/security/advisories/GHSA-55fm-gm4m-3v3j

4. Heap Overflow in json.h(json_parse_object()) https://github.com/hyrathon/trophies/security/advisories/GHSA-wvpq-p7pp-cj6m

5. Heap Overflow in json.h(json_parse_string()) https://github.com/hyrathon/trophies/security/advisories/GHSA-29hf-wrjw-2f28