DongHa Lee's Home Page

Security researcher & vulnerability analyst

E-mail: p@sswd.pw Phone: +82 10 3025 9474 X / Twitter: @gap_dev Discord: lee_dongha

Profile

Security researcher and vulnerability analyst specializing in fuzzing, AI security, reversing, and exploit development.

Published multiple CVEs across Apple, Chromium, Nvidia CUDA Toolkit, Adobe, Autodesk, and open-source ecosystems.

Active contributor to international security conferences, academic research, and open-source fuzzing communities.

Technical skills

Vulnerability Research

pwnable exploitationweb hackingreverse engineeringAI securityfuzzingpost-quantum cryptography

Languages

CC++PythonRustx86 AssemblyNode.jsCUDA

Systems

Embedded developmentDockerLinux Kernel security

Experience

(4)

Republic of Korea Army

Jun. 1, 2026 — Nov. 30, 2027
Active Duty Service MemberSouth Korea

Software Security Assessment Lab (SSA LAB)

Feb. 2025 — Present
Undergraduate ResearcherSouth Korea
  • Conducting advanced vulnerability research in fuzzing, attack surface discovery, and automated exploitation.
  • Contributing to multiple security publications and national-level cybersecurity research projects.

ENKI WhiteHat

Aug. 2024 — Dec. 2024
Cybersecurity ResearcherSouth Korea
  • Conducted R&D on large-scale exploit detection and vulnerability analysis across diverse software targets.
  • Built data-processing pipelines to handle high-volume security telemetry and vulnerability datasets.
  • Developed and evaluated AI-based models for automated exploit classification and attack pattern detection.

Self-Employed Startup

Jun. 2023 — Aug. 2024
Founder / Security ConsultantSouth Korea
  • Led offensive security consulting and penetration testing engagements for organizations and research clients.
  • Delivered vulnerability assessments across embedded, IoT, and enterprise environments.

Published CVEs

(31)

Select an entry to read its full disclosure.

CVE-2026-85062 ReDoS in Colord NPM module

!!My First Bug in 2023!! ReDoS in Colord NPM module

CVE-2026-28817 Apple Print (+$20,000 reward)

Apple macOS/IOS/etc Tahoe 26.3 Print (+$20000 reward)

CVE-2026-28868 Apple XNU Kernel (+$1,000 reward)

Apple XNU Kernel Tahoe 26.3 (+$1000 reward)

CVE-2026-20695 Apple XNU Kernel

ZDI-CAN-28499, Apple XNU Kernel Tahoe 26.3

CVE-2025-23339 Nvidia CUDA Toolkit Vulnerability

Nvidia CUDA Toolkit Vulnerability

CVE-2025-43511 Apple WebKit GPU Vulnerability (+$1,000 reward)

Apple WebKit GPU Vulnerability (+$1000 reward)

CVE-2025-43401 Apple CoreAnimation Vulnerability

Apple Tahoe 26.1 CoreAnimation Vulnerability

CVE-2025-10500 Chromium GPU Vulnerability (+$15,000 reward)

Chromium GPU Vulnerability (+$15000 reward)

CVE-2025-43287 Apple ImageIO

Apple Tahoe 26.0 ImageIO

CVE-2025-43372 Apple CoreMedia (+$1,000 reward)

Apple Tahoe 26.0 CoreMedia (+$1000 reward)

CVE-2025-43338 Apple ImageIO (+$1,000 reward)

Apple Tahoe 26.0 ImageIO (+$1000 reward)

CVE-2025-53015 XMP Profile Parsing Bug

CVSS 7.5 / CWE-835 / XMP Profile Parsing Bug

CVE-2025-24184 Apple CoreMedia Playback

Apple CoreMedia Playback (iOS 18.3 / macOS Sequoia 15.3)

CVE-2025-4605 Autodesk MAYA 2025 Memory Corruption

CVSS 5.5 / CWE-789 / Autodesk MAYA 2025 Memory Corruption

CVE-2024-44915 Improper Access Control

CVSS 5.5 / CWE-284 / Improper Access Control

CVE-2024-44914 Improper Access Control

CVSS 5.5 / CWE-284 / Improper Access Control

CVE-2024-44913 Improper Access Control

CVSS 5.5 / CWE-284 / Improper Access Control

CVE-2024-45872 Heap-based Buffer Overflow

CVSS 6.3 / CWE-122 / Heap-based Buffer Overflow

CVE-2024-45871 Improper Input Validation

CVSS 6.3 / CWE-20 / Improper Input Validation

CVE-2024-45870 Improper Access Control

CVSS 6.5 / CWE-284 / Improper Access Control

KVE-2024-0454 KISA KNVD Disclosure Report

KISA KNVD Disclosure Report

KVE-2024-0821 Find the Gap Private Bug Bounty Report

Find the Gap Private Bug Bounty Report

KVE-2024-0820 Find the Gap Private Bug Bounty Report

Find the Gap Private Bug Bounty Report

CVE-2024-42358 Denial-of-Service via Infinite Loop

CVSS 5.5 / CWE-835 / Denial-of-Service via Infinite Loop

CVE-2024-20746 Adobe Premiere Pro Out-of-Bounds Write

CVSS 7.8 / CWE-787 / Adobe Premiere Pro Out-of-Bounds Write

CVE-2024-27088 es5-ext ReDoS

CVSS 5.5 / CWE-400, CWE-1333 / es5-ext ReDoS

CVE-2024-22526 Buffer Copy Without Size Check

CVSS 5.5 / CWE-120 / Buffer Copy Without Size Check

CVE-2024-23339 Prototype Pollution

CVSS 6.5 / CWE-1321 / Prototype Pollution

CVE-2023-50245 Buffer Copy Without Size Check

CVSS 9.8 / CWE-120 / Buffer Copy Without Size Check

CVE-2023-45827 Prototype Pollution

CVSS 9.8 / CWE-1321 / Prototype Pollution

CVE-2023-43646 Regular Expression DoS

CVSS 7.5 / CWE-400, CWE-1333 / Regular Expression DoS

  1. CVE-2026-85062 — !!My First Bug in 2023!! ReDoS in Colord NPM module
  2. CVE-2026-28817 — Apple macOS/IOS/etc Tahoe 26.3 Print (+$20000 reward)
  3. CVE-2026-28868 — Apple XNU Kernel Tahoe 26.3 (+$1000 reward)
  4. CVE-2026-20695 — ZDI-CAN-28499, Apple XNU Kernel Tahoe 26.3
  5. CVE-2025-23339 — Nvidia CUDA Toolkit Vulnerability
  6. CVE-2025-43511 — Apple WebKit GPU Vulnerability (+$1000 reward)
  7. CVE-2025-43401 — Apple Tahoe 26.1 CoreAnimation Vulnerability
  8. CVE-2025-10500 — Chromium GPU Vulnerability (+$15000 reward)
  9. CVE-2025-43287 — Apple Tahoe 26.0 ImageIO
  10. CVE-2025-43372 — Apple Tahoe 26.0 CoreMedia (+$1000 reward)
  11. CVE-2025-43338 — Apple Tahoe 26.0 ImageIO (+$1000 reward)
  12. CVE-2025-53015 — CVSS 7.5 / CWE-835 / XMP Profile Parsing Bug
  13. CVE-2025-24184 — Apple CoreMedia Playback (iOS 18.3 / macOS Sequoia 15.3)
  14. CVE-2025-4605 — CVSS 5.5 / CWE-789 / Autodesk MAYA 2025 Memory Corruption
  15. CVE-2024-44915 — CVSS 5.5 / CWE-284 / Improper Access Control
  16. CVE-2024-44914 — CVSS 5.5 / CWE-284 / Improper Access Control
  17. CVE-2024-44913 — CVSS 5.5 / CWE-284 / Improper Access Control
  18. CVE-2024-45872 — CVSS 6.3 / CWE-122 / Heap-based Buffer Overflow
  19. CVE-2024-45871 — CVSS 6.3 / CWE-20 / Improper Input Validation
  20. CVE-2024-45870 — CVSS 6.5 / CWE-284 / Improper Access Control
  21. KVE-2024-0454 — KISA KNVD Disclosure Report
  22. KVE-2024-0821 — Find the Gap Private Bug Bounty Report
  23. KVE-2024-0820 — Find the Gap Private Bug Bounty Report
  24. CVE-2024-42358 — CVSS 5.5 / CWE-835 / Denial-of-Service via Infinite Loop
  25. CVE-2024-20746 — CVSS 7.8 / CWE-787 / Adobe Premiere Pro Out-of-Bounds Write
  26. CVE-2024-27088 — CVSS 5.5 / CWE-400, CWE-1333 / es5-ext ReDoS
  27. CVE-2024-22526 — CVSS 5.5 / CWE-120 / Buffer Copy Without Size Check
  28. CVE-2024-23339 — CVSS 6.5 / CWE-1321 / Prototype Pollution
  29. CVE-2023-50245 — CVSS 9.8 / CWE-120 / Buffer Copy Without Size Check
  30. CVE-2023-45827 — CVSS 9.8 / CWE-1321 / Prototype Pollution
  31. CVE-2023-43646 — CVSS 7.5 / CWE-400, CWE-1333 / Regular Expression DoS

...and additional ongoing disclosures

Presentations & lectures

(8)

  1. Fuzzing & Symbolic Execution — CCA National Information Security Seminar (Feb. 2025)

  2. Metaverse Fuzzing for 0-day Discovery — KUCIS Regional Seminar (Oct. 2024)

  3. Main Instructor, KISA Academy Bug Hunting Master Course (Jun. 2024)

  4. AddressSanitizer and Out-of-Bounds Vulnerabilities — CCA Seminar (Mar. 2024)

  5. Offensive Security Study Lecturer (2024)

  6. Teaching Assistant, Network Security Laboratory Course (2024)

  7. ReDoS Detection Tool Research Presentation — Korea Institute of Information Security (Nov. 2023)

  8. Automated ReDoS Discovery Methodology — KUCIS Seminar (Sep. 2023)

Papers

(11)

  1. LLM Agent-Driven Honeypot Smart Contract Detection Using Symbolic Execution — Korea Institute of Information Security [PDF]

  2. Constructing a Public Framework-XPC Service Dependency Graph via Undocumented macOS Interface Identification for Attack Surface Analysis — KCI Journal [PDF]

  3. Hybrid Fuzzing Research Trends and Technical Challenges — Korea Institute of Information Security

  4. Android Fuzzing Harness Generation via Static and Dynamic Analysis — Korea Institute of Information Security

  5. LLM-based Software Vulnerability Analysis Research Trends — Korea Institute of Information Security

  6. Automated macOS Attack Surface Identification using XPC and IOKit — Korea Institute of Information Security [PDF]

  7. Attack Surface and Vulnerability Analysis of ARM Virtualization — KTCCS (KCI Journal) [PDF]

  8. Symbol Porting Techniques for macOS Kernel Debugging — Korea Information Processing Society [PDF]

  9. Binary-only Fuzzing Performance Improvement via Corpus Transfer — Korea Institute of Information Security [PDF]

  10. ReDoS Detection Tool Trend Analysis and Improvement — Korea Institute of Information Security [PDF]

  11. Node.js Package Vulnerability Research via Prototype Pollution Pattern Study — Korea Institute of Information Security [PDF]

Paper previews

First pages. Select a paper to open the complete PDF in a new tab.

Projects

(9)

  1. Finding Vulnerabilities in Silicon macOS Virtualization

  2. Contributor to AFL++ open-source fuzzing framework

  3. LKL GPU Kernel Driver Fuzzing Project (2024)

  4. Member, Hspace Knights Security Activities (2024)

  5. ReBoB / NodeBOB Vulnerability Research Team (2023)

  6. CTF Challenge Authoring and Competition Operations

  7. Smart Transportation IoT Device Vulnerability Analysis Project

  8. Enterprise Penetration Testing and Security Consulting Engagements

  9. Multiple Government and Industry R&D Security Projects

Awards

(14)

  1. DEFCON 34 FINAL, 7th Place (Aug. 2026)

  2. SekaiCTF 2026, 7th Place (Jun. 2026)

  3. DEFCON 34 CTF Qualifier, 6th Place (May 2026)

  4. TJCTF 2026, 1st Place (May 2026)

  5. CODEGATE 2026 Qualifier CTF General, 4th Place (Mar. 2026)

  6. Selected for the Apple Security Research Device Program and received a Security Research Device (2026)

  7. Best Paper Award — Korea Institute of Information Security (Nov. 2025)

  8. TS Penetration Testing Competition, 4th Place — Korea Transportation Safety Authority (Nov. 2025)

  9. Woori Bank Wooricon Hacking Competition, 1st Place (Sep. 2025)

  10. WagleWagle Hackathon, 1st Place (Feb. 2024)

  11. Gachon University Talent Award (Nov. 2023)

  12. Best Paper Award — Korea Institute of Information Security (Nov. 2023)

  13. Information Security Policy Proposal Competition, Finalist (Oct. 2023)

  14. WagleWagle Hackathon, 3rd Place (Sep. 2023)

Education

(2)

Best of the Best (BoB) 14th

Jul. 2025 — Dec. 2025
Vulnerability Analysis TrackSouth Korea

Gachon University

2023 — Present
B.S. in Information SecuritySouth Korea

Selected open-source projects & contributions

(7)

Linux Kernel — KVM/ARM64

Upstream contributor to ARM64 nested virtualization. Authored a mainline fix for incorrect VNCR invalidation range calculation that could leave stale TLB entries (ebb2d8fd), and co-discovered/reported a VNCR TLB ASID matching flaw as part of Team 0xB6 (860b21c3).

LibAFL_vifuzz

LibAFL-based work for macOS binary-only fuzzing, providing instrumentation and fuzzing capabilities used as the foundation for ViFuzz development.

MacOS-UserlandAttackSurface-visualization

Automated macOS userland attack-surface analysis and visualization. Analyzes Frameworks, XPC/Mach Services, Objective-C imports/exports, and dlopen relationships to graph attack surfaces and dependencies.

hyfervisor

Virtualization Framework-based environment for macOS kernel live debugging on Apple Silicon. Supports custom XNU/Kext and KASAN kernel booting, as well as a GDB debug stub.

MacOs-Bootloader-Patch-Tools

Boot-chain patching tools for booting custom kernels and Kexts in Apple Silicon VMs. Automates AVPBooter → LLB → iBoot → Kernel Cache patching.

MacOs-KSANCOV-coverage-tools

Kernel coverage measurement and analysis using XNU's /dev/ksancov, including PC/edge coverage and per-Kext coverage analysis.

MacOS-kext-visualization

Analysis and visualization of macOS Kext structures and dependencies, including Kext dependency graphs and comparisons between host and VM environments.