Pwno

Pwno is a research-first startup that solve one problem:
Making AI that find real-world critical bugs.
founded by Ruikai Peng

We have found 29 memory vulnerabilities in Chromium (Google), FFmpeg Firefox (Mozilla), WebKit (Apple), Redis, PostgreSQL, DNG (Adobe) in a month. (Dec 8, 25 - Jan 8, 26)
We're R&D intensive; we spoke at Black Hat USA, OAIC. (Notably the presenter spoke as the youngest speaker in history for both conference)
You can see our open-source'd works at github, researches at research

List of bugs
Pwno found,

PROJECT	COMPONENT	ID	TYPE	DATE
FFmpeg	PWNO-0033	[REDACTED]	[REDACTED]	2026-01-30
Linux	PWNO-0032	TTLM Parsing in WiFi/mac8021 one‑byte look past (over-the-air)↗	OOB Read	2026-01-23
FFmpeg	PWNO-0031	OOB write (heap) in showcwt filter with direction=du and bar=0	OOB Write	2026-01-16
V8	PWNO-0030	RISC-V Drumbrake CWasmEntry uses wrong root register↗	Heap Buffer Overflow	2026-01-14
FFmpeg	PWNO-0029	intra-object OOB write in ff_aac_usac_reset_state() (che->ch[ch])	OOB Write	2026-01-14
FFmpeg	PWNO-0028	sanm BL16 subcodecs 1/7 OOB read via undersized bytes_left checks	OOB Read	2026-01-10
Linux	PWNO-0027	ublk partition_scan_work race UAF on device teardown↗	UAF	2026-01-08
V8	PWNO-0026	ARM64 MOPS memory.fill can write before OOB trap (scheduler treats kArm64Set as side‑effect‑free)	OOB Write	2026-01-07
FFmpeg	PWNO-0025	signed->unsigned skip regression in APP parser (jpeg)	Undefined Behavior	2026-01-06
Llama.cpp	PWNO-0023	[REDACTED]	[REDACTED]	2026-01-05
Postgres	PWNO-0022	OOB access in wakeupWaiters() chunking loop (WAIT FOR)↗	OOB Read	2026-01-05
V8	PWNO-0021	WasmFX: Turboshaft Suspend tag returns/params mismatch↗		2026-01-04
FFmpeg	PWNO-0020	Extra IFDs escaping via nested IFDs	OOB Write	2026-01-01
Redis	PWNO-0019	[REDACTED]	[REDACTED]	2025-12-30
Redis	PWNO-0018	[REDACTED]	[REDACTED]	2025-12-30
Redis	PWNO-0017	[REDACTED]	[REDACTED]	2025-12-30
Chromium	PWNO-0015	UAF read in WebDragDest::dropHitTestDidComplete invalid-drag-target path on macOS	UAF	2025-12-23
FFmpeg	PWNO-0014	Heap-buffer-overflow in EXIF writer for extra IFD tags↗	OOB Write	2025-12-21
DNG	PWNO-0013	[REDACTED]	Unitialized memory	2025-12-19
WebKit	PWNO-0012	[REDACTED]	[REDACTED]	2025-12-18
WebKit	PWNO-0011	[REDACTED]	[REDACTED]	2025-12-18
OpenSSL	PWNO-0010	OOB write in SHA3/KECCAK deserialization	OOB Write	2025-12-16
OpenSSL	PWNO-0009	OOB write via SHA-2 digest deserialization	OOB Write	2025-12-16
FFmpeg	PWNO-0008	Heap OOB write in libsvtjpegxs decoder, chunk mode↗	OOB Write	2025-12-14
FFmpeg	PWNO-0007	Heap OOB write in MPEG-TS JPEG‑XS PES parsing (libavformat/mpegts.c)↗	OOB Write	2025-12-14
Firefox	PWNO-0006	UAF in nsDocLoader::GetInterface during APZ repaint / scrolling↗	UAF	2025-12-13
FFmpeg	PWNO-0003	avformat/sierravmd: fix header read error check (tiny precedence bug)	Undefined Behavior	2025-12-11
FFmpeg	PWNO-0005	OOB read in Vulkan DPX hwaccel shader ↗	OOB Read	2025-12-11
FFmpeg	PWNO-0002	Crash in vf_noise SSE2 on misaligned frames ↗	Denial of Service	2025-12-08
FFmpeg	PWNO-0001	Stack overflow in drawvg parser on deeply nested scripts	Stack Overflow	2025-12-08