Research notes / 2026
Inside the
investigation.
Apple vulnerability research by David Strnadel: IOMobileFrameBuffer, AuthKit and Accessibility. The mechanism, the experiment, and what the evidence proves.
03 PUBLIC CVEs02 INVESTIGATIONS
CVE-2026-65398Technical writeup · archived evidence
↗CVE-2026-43730IOMobileFrameBuffer
From a missing bounds check to a crash-based kernel-read witness.
Technical note · report reconstruction
↗CVE-2026-43664AuthKit
User fingerprinting through a service-mediated preference path.
Technical note · report reconstruction
↗Accessibility
Sensitive-data exposure from the same preference investigation.