Intelligence

Advisories, writeups, and field notes.

Everything we've cleared for public reading — root-cause analysis, disclosed advisories, and notes from the work.

All Post

2026.10.04 Post 7 min

0-Click Bluetooth Overflow in Apple's Root Daemon: Finding Two Memory Corruption Bugs in bluetoothd

On September 14, 2026, Apple shipped iOS 27, tvOS 27, watchOS 27, and visionOS 27. In the security advisories for all four releases, under CoreBluetooth - LE Additional Recognition:

> "We would like to acknowledge ... Maliq Barnard ... for their assistance."

This is the story behind that credit — two memory corruption bugs in Apple's Bluetooth daemon, found through systematic binary analysis and proven in the live root process.

MacOSBluetoothdzero-click · Maliq Barnard