Ivan Fratric 💙💛

@ifsecure · Twitter · 2025-02-26 11:28 UTC

I tweeted before about the Apple CoreAudio issues found by Google TAG. Well, the fuzz harness used to find these issues is now included in Jackalope examples, see https://github.com/googleprojectzero/Jackalope/tree/main/examples/AudioCodecs . Happy fuzzing! :)

Ivan Fratric 💙💛

@ifsecure · Twitter · 2025-01-28 12:50 UTC

The latest Apple security update contains fixes for three CoreAudio issues (CVE-2025-24160, CVE-2025-24161, CVE-2025-24163). These were found by Google Threat Analysis Group using Jackalope fuzzer.