PUBLIC MIRROR A read-only public view of Anvil. Only publicly-disclosed findings are shown; the Playbook, techniques, sessions and embargoed research are hidden.

Research Overview

Portfolio triage for current vulnerability research, agent output, and next recommended work.

Start research session Open Method
10
Targets
7
Active
92
Findings
14
Verified (real-world)
1
CVEs
47 Harness only test artifact — not verified 2 Public API reproduced via public API 2 Real app real consumer crashed 0 Platform ImageIO / BitmapFactory / browser 10 Disclosure ready CVE / advisory ready

Latest findings

Newest first — check here after an unattended run.
Heap OOB (read+write) in TIFFAppendToStrip via out-of-range strip index (TIFFGrowStrips grows by 1) libtiff verified 12d tiffcrop 24-bit sample extractor: signed left-shift overflow UB (uint8 << 24) libtiff verified 13d Heap OOB write in JPEGDecodeRaw 12-bit downsampled path (unbounded tmpbuf clump write) JPEGDecodeRaw libtiff verified 13d Heap OOB read (+ misaligned load) in JPEGEncodeRaw 12-bit path — packed samples read as 2-byte JPEGEncodeRaw libtiff verified 13d Heap OOB read in ColorMap/TransferFunction IFD writers when BitsPerSample enlarged after set libtiff verified 13d Signed left-shift overflow UB in tiff2ps Ascii85Encode (colormap/pixel emission) libtiff verified 13d thumbnail: division-by-zero (SIGFPE) via filterWidth uint16_t truncation libtiff verified 13d

Next research frontier

The most promising unexamined modules to look at next.
🔒 Next-step leads — internal

The ranked list of the most promising unexamined modules is part of the internal platform.

Research coverage

Per-target portfolio state — open a target for the full workbench.
TargetStatusPriFindingsCVEs CoverageExhaustedLast activity
Grok active high 14 —
15/16
0% 2026-06-23
Skia active high 1 —
21/47
0% 2026-06-23
libpng active high 4 —
14/22
40% 2026-06-14
libtiff exhausted high 7 —
34/34
0% 2026-07-03
libheif paused high 8 1
19/20
60% 2026-06-23
examined examining unexplored

Disclosure pipeline

From suspicion to shipped fix.
6
Suspected
›
47
Harness
›
14
Verified
›
27
Reported
›
21
Public
›
4
Patched
›
1
CVE