YEHIA EZZAT
0xSemizzz
Security Researcher
Computer Science Student
Vulnerability Research
Latest Blog Posts
Four Hours, Four Bytes: Hunting Down CVE-2026-18649
The full story of finding an unbounded memory growth bug in GStreamer's RTP depayloader, including the seven attempts that failed before the exploit worked.
CVE-2026-18649: Unbounded Memory Growth in GStreamer's RTP Depayloaders
A technical breakdown of a remote, unauthenticated denial of service in GStreamer's H.264 and H.265 RTP depayloaders, where FU-A fragment reassembly had no size limit.
Current Interests
About
I'm Yehia Ezzat, an Egyptian Computer Science student at The British University in Egypt (BUE) with an interest in vulnerability research, open source security, and low-level systems.
I spend my time researching vulnerabilities in open source software, developing security tools, and learning how complex software systems work and fail. I have worked on vulnerability research in open source projects such as GStreamer, including responsible disclosure and CVE research.
My interests currently span areas such as hypervisors, web browsers, compilers, operating systems, and other low-level systems. I am still exploring these areas to find where I can contribute the most as a security researcher.
I enjoy understanding software at a deeper level, finding security issues, and contributing fixes back to the projects I research.