MTEscape: Bypassing ARM's Asynchronous MTE with General Memory Corruption Vulnerabilities by Kyeongmin Kim (@hareh4ru)

Direct connection - NOT needed for Kyeongmin Kim (@hareh4ru) of KAIST Hacking Lab who remotely breached the Samsung Galaxy S26 with 1 unique bug and 2 collision winning $8.5k and 3.5 Master of Pwn points #Pwn2Own

My last CTF has come to an end. I’m very proud that our team, 0x4b52, finished in second place at DEF CON CTF. On the final day, I was a little upset—not only as a CTF player, but also as a professor. As a professor, I always want to tell my students that we should try to live and compete with integrity. As a CTF player, I deeply respect a community where each of us voluntarily chooses to uphold the spirit of the game. I believe we should hack systems, not the rules. Of course, I understand that not everyone may see things the same way. And to be fair, I probably didn’t think this way myself when I was younger. Maybe I’ve just gotten a little older and come to believe that this is the way things should be. Anyway, a huge thank you to BBB for organizing this competition. It is impossible to imagine how much time, effort, and volunteer work it takes to make an event like this possible. If I came across as too aggressive during the game, I’m really sorry. As a team leader, every single tick felt incredibly precious to me. Congratulations to Blue Water. They definitely outperformed us. Some of the team members are my old friends. I really want to congratulate them. Most of all, I’m grateful to my teammates and students. It was truly a pleasure playing together. I had a great time. Thank you, everyone.