I dig into kernels, embedded systems, and applications to find vulnerabilities.
I build my own research tools, turn findings into working exploits, and contribute fixes upstream.

Security Contributor to

Email · CVE archive · Dreamhack · 한국어

• CASO Lab, Kangwon National University · Undergraduate Research Intern
  Computer Architecture · Artificial Intelligence · Security · Operating System
  May 2024 – Jan 2025
• WhiteHat School, KITRI · Cohort 2
  Mar – Sep 2024

2026

• Authored 3 patches merged into Linux mainline, fixing USB UAC1, PPP, and BPF verifier issues. UAC1 · PPP · BPF
  For USB UAC1, developed an exploit chaining CVE-2026-31720 with CVE-2026-31513 to bypass SSP and KASLR and achieve root command execution in x86-64 QEMU/KVM. Exploit report
• Discovered CVE-2026-33636 in libpng, rated Critical in Google’s Android Security Bulletin. Co-authored the security patch shipped in libpng 1.6.56 and integrated into Google AOSP, Ubuntu, and Firefox. The fix also shipped in Oracle JDK and Samsung Galaxy updates. Listed in libpng’s AUTHORS. CVE-2026-33636 · libpng · Android bulletin · AOSP · Firefox · Oracle JDK · Samsung · Ubuntu · AUTHORS
• Reported 4 vulnerabilities, including 3 Critical, across AI products (PraisonAI and Langflow). PraisonAI A2A · PraisonAI CI · Langflow Policies · Langflow Agentic Assistant
• Reported vulnerabilities in ESP32 NBNS and Apache NimBLE ATT, published as CVE-2026-41429 and CVE-2026-45815.
  For ESP32, developed a network-only exploit chain on physical ESP32-S3 hardware, combining CVE-2026-41429 with CVE-2024-30166 to bypass stack protection and demonstrate FreeRTOS task execution and 1,440-byte firmware memory disclosure. Physical exploit
• GW TakeDown · Galaxy Watch firmware security research. Samsung Mobile Security approved a reward for one report.
  Designed and built RehostRace and VeriRehost for firmware rehosting, execution replay, and analysis of verification flows.
• Received the maximum reward from DenchiSoft’s bug bounty program for reporting a security vulnerability ($1,000).
• Built Adaptive Harness to score and rank source files using code signals, Git history, and external evidence, then run multiple search strategies and reallocate each session’s remaining investigation budget based on review results and cost. Built Agent Security Company to enforce per-agent filesystem and network permissions through Linux identities and sandbox policies, with separate QA agents verifying research results.

2025

• Freelance Development · Designed and delivered a 112-channel LED control system for a psychology research lab, including custom hardware, Raspberry Pi 5 control software, and a 19-page operating manual.
• Silver Award, Student Division, Gangwon Cybersecurity Hacking Defense Competition (GCHD).
• Solved 154 Pwnable challenges and reached an overall Wargame rank in the 200s on Dreamhack.

2024

• GW5 · Reverse-engineered Galaxy Watch5 sensor drivers and SensorHub firmware; built AVB hash verification tools and a custom wired setup for firmware experiments.
• WhiteGang · Developed Windows user-mode and kernel-driver components for process protection, including DLL loading controls and handle-access restrictions. PalAnticheat · PalAnticheatEx
• Council Chair's Award, CO-SHOW AutoHack.

2023

• Excellence Award, Chuncheon Public Data Idea Competition.