Franco Belman

advisory May 29, 2026

Persistent Remote DoS via Integer Underflow in Wire iOS

high CVE-2026-35049 · Wire

The Wire iOS client crashes when it receives a malicious Proteus external message whose encrypted payload is shorter than 16 bytes. The crash is triggered automatically after message receival with no …

✓ fixed Franco Belman

post Oct 15, 2024

Finding Vulnerability Variants at Scale

While performing a security audit, I discovered a file format vulnerability that took me down an unexpected rabbit hole. The bug was fairly straightforward but what made it interesting was its origin …

Franco Belman