Kyungmin Inn

I study how software breaks at the memory level: heap corruption in network daemons, Windows kernel drivers, and the firmware inside routers and door locks. Computer Engineering at the University of Michigan.

Recent work

Research

All research

Disclosures 1

  1. 0-day2026

    IP camera 0-day: pre-auth RCE to root

    Consumer IP camera

    Previously unknown bug that lets an unauthenticated attacker on the network take a root shell on a consumer IP camera. Reported to KISA; vendor and details withheld until coordinated disclosure ends.

    DisclosureWithheld until fix

1-day reproductions 3

  1. CVE-2023-421152026

    Exim SMTP AUTH out-of-bounds write

    Exim

    Unauthenticated out-of-bounds write in the SMTP AUTH handler; reproduced the bug and the path to code execution.

    1-day reproductionWrite-up soon
  2. CVE-2025-554232026

    ipTIME UPnP OS command injection

    ipTIME routers

    Command injection in the UPnP service; root-cause analysis and reproduction on real firmware.

    1-day reproductionWrite-up ↗
  3. CVE-2026-20052026

    PostgreSQL pgcrypto heap overflow

    PostgreSQL / pgcrypto

    Integer overflow in PGP session-key parsing leading to a heap overflow; built a working exploit from the advisory.

    1-day reproductionWrite-up soon

Writing

All