Showing cs.CRShow all
3 papers · 1 filter
cs.CR2025
A Practical Guideline and Taxonomy to LLVM's Control Flow Integrity
Sabine Houy, Bruno Kreyssig, Timothee Riom +2
Memory corruption vulnerabilities remain one of the most severe threats to software security. They often allow attackers to achieve arbitrary code execution by redirecting a vulner…
cs.CR2025
Sleeping Giants -- Activating Dormant Java Deserialization Gadget Chains through Stealthy Code Changes
Bruno Kreyssig, Sabine Houy, Timothée Riom +1
Java deserialization gadget chains are a well-researched critical software weakness. The vast majority of known gadget chains rely on gadgets from software dependencies. Furthermor…
cs.CR2025
Deserialization Gadget Chains are not a Pathological Problem in Android:an In-Depth Study of Java Gadget Chains in AOSP
Bruno Kreyssig, Timothée Riom, Sabine Houy +2
Inter-app communication is a mandatory and security-critical functionality of operating systems, such as Android. On the application level, Android implements this facility through…