# Apple CVE Writeups & Security Research | David Strnadel

Canonical source: https://davidstrnadel.com/research/
Author: David Strnadel
Source content last updated: 2026-10-30T12:42:20+00:00

> Text edition of the public page. Sources, shared attribution and evidence limits are retained.

Research notes / 2026

## Inside the investigation.

Apple vulnerability research by David Strnadel: IOMobileFrameBuffer, AuthKit and Accessibility. The mechanism, the experiment, and what the evidence proves.

03 PUBLIC CVEs 02 INVESTIGATIONS

CVE-2026-65398

Technical writeup · archived evidence

## IOMobileFrameBuffer

From a missing bounds check to a crash-based kernel-read witness.

↗

[Read the source](https://davidstrnadel.com/research/cve-2026-65398/)

CVE-2026-43730

Technical note · report reconstruction

## AuthKit

User fingerprinting through a service-mediated preference path.

↗

[Read the source](https://davidstrnadel.com/research/cve-2026-43730/)

CVE-2026-43664

Technical note · report reconstruction

## Accessibility

Sensitive-data exposure from the same preference investigation.

↗

[Read the source](https://davidstrnadel.com/research/cve-2026-43664/)