CVE-2026-43816
Kernel Out-of-Bounds Write
Credited in Apple’s security advisory. The issue was resolved with improved bounds checking.
rootxran
Independent iOS Security Research
About
I’m Rao Ali Nawaz, an independent iOS security researcher working as @rootxran. My research lives at the boundary between software and silicon: Apple platform internals, kernel behavior, memory corruption, and the quiet assumptions that become vulnerabilities.
Vulnerabilities
ImageIO
iOS iMessage Zero-Click
Capabilities
Platforms
iOS architecture and internals
Deep understanding of iOS architecture, system frameworks, services, the iOS SDK, IPC, and IOKit.
Analysis
Reverse engineering
Strong iOS reverse engineering skills using IDA Pro, Ghidra, and Binary Ninja.
ARMv8
AArch64 architecture
Solid knowledge of the ARMv8 instruction set and low-level program behavior.
Debugging
Dynamic analysis
iOS debugging, crash report and kernel panic analysis with LLDB, GDB, and Frida.
Languages
Systems programming
C and Objective-C, with experience in Swift, C++, Shell, and Python.
Personal Projects
Streamlink
Personal project
AD Attackbox
Active Directory Attackbox
InvokerC2
Personal project
APT Labs
APT Emulation Labs
Achievements
17th Place
Black Hat MEA CTF 2025
1st Place
PCC 2025
Organized by Air University, Islamabad
2nd Place
PuCon 2025
Organized by University of Punjab
2nd Place
PCC 2024
Organized by Air University, Islamabad
1st Place
TCT CTF 2024
Organized by Air University, Islamabad
3rd Place
CHC CTF 2024
Organized by Comsats University, Islamabad
2nd Place
AirTech CTF 2024
Organized by Air University, Islamabad
2nd Place
Blitzstorm CTF 2024
Organized by Air University, Islamabad