- Software security enthusiast, including vulnerability discovery and cause analysis
- Assistant Researcher at Beijing Zhongguancun Laboratory
- Ph.D. graduate from the Institute of Information Engineering, Chinese Academy of Sciences
- Bachelor’s degree from Huazhong University of Science and Technology
| CVE | Program | Type | Analysis Tool |
|---|---|---|---|
| CVE-2018-20189 | gm | Assertion Failure | CarpetFuzz |
| CVE-2019-7581 | listswf | Memory Allocation Failure | CarpetFuzz |
| CVE-2019-7582 | listswf | Memory Allocation Failure | CarpetFuzz |
| CVE-2019-7663 | tiffcp | SEGV | CarpetFuzz |
| CVE-2022-22844 | tiffset | Global Buffer Overflow | CarpetFuzz |
| CVE-2022-0865 | tiffcp | Assertion Failure | CarpetFuzz |
| CVE-2022-0907 | tiffcrop | SEGV | CarpetFuzz |
| CVE-2022-0909 | tiffcrop | FPE | CarpetFuzz |
| CVE-2022-0924 | tiffcp | Heap Buffer Overflow | CarpetFuzz |
| CVE-2022-1056 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2022-1622 | tiffcp | SEGV | CarpetFuzz |
| CVE-2022-1623 | tiffcp | SEGV | CarpetFuzz |
| CVE-2022-2056 | tiffcrop | FPE | CarpetFuzz |
| CVE-2022-2057 | tiffcrop | FPE | CarpetFuzz |
| CVE-2022-2058 | tiffcrop | FPE | CarpetFuzz |
| CVE-2022-2953 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2022-3597 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2022-3598 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2022-3599 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2022-3626 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2022-3627 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2022-4450 | openssl-asn1parse | Double Free | CarpetFuzz |
| CVE-2022-4645 | tiffcp | Heap buffer overflow | CarpetFuzz |
| CVE-2022-29977 | img2sixel | Assertion failure | CarpetFuzz |
| CVE-2022-29978 | img2sixel | FPE | CarpetFuzz |
| CVE-2023-0795 | tiffcrop | SEGV | CarpetFuzz |
| CVE-2023-0796 | tiffcrop | SEGV | CarpetFuzz |
| CVE-2023-0797 | tiffcrop | SEGV | CarpetFuzz |
| CVE-2023-0798 | tiffcrop | SEGV | CarpetFuzz |
| CVE-2023-0799 | tiffcrop | Heap Use After Free | CarpetFuzz |
| CVE-2023-0800 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2023-0801 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2023-0802 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2023-0803 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2023-0804 | tiffcrop | Heap Buffer Overflow | CarpetFuzz |
| CVE-2024-3248 | xpdf | stack-buffer-overflow | ProphetFuzz |
| CVE-2024-4853 | editcap | heap-buffer-overflow | ProphetFuzz |
| CVE-2024-4855 | editcap | bad free | ProphetFuzz |
| CVE-2024-31743 | ffmpeg | segmentation violation | ProphetFuzz |
| CVE-2024-31744 | jasper | assertion failure | ProphetFuzz |
| CVE-2024-31745 | dwarfdump | use-after-free | ProphetFuzz |
| CVE-2024-31746 | objdump | heap-buffer-overflow | ProphetFuzz |
| CVE-2024-32154 | ffmpeg | segmentation violation | ProphetFuzz |
| CVE-2024-32157 | mupdf | segmentation violation | ProphetFuzz |
| CVE-2024-32158 | mupdf | negative-size-param | ProphetFuzz |
| CVE-2024-34960 | ffmpeg | floating point exception | ProphetFuzz |
| CVE-2024-34961 | pspp | segmentation violation | ProphetFuzz |
| CVE-2024-34962 | pspp | segmentation violation | ProphetFuzz |
| CVE-2024-34963 | pspp | assertion failure | ProphetFuzz |
| CVE-2024-34965 | pspp | assertion failure | ProphetFuzz |
| CVE-2024-34966 | pspp | assertion failure | ProphetFuzz |
| CVE-2024-34967 | pspp | assertion failure | ProphetFuzz |
| CVE-2024-34968 | pspp | assertion failure | ProphetFuzz |
| CVE-2024-34969 | pspp | segmentation violation | ProphetFuzz |
| CVE-2024-34971 | pspp | segmentation violation | ProphetFuzz |
| CVE-2024-34972 | pspp | assertion failure | ProphetFuzz |
| CVE-2024-35316 | ffmpeg | segmentation violation | ProphetFuzz |