Remote Code Execution via MIDI Messages
Demonstrates remote code execution across audio software and operating system synthesis engines by weaponizing malformed MIDI protocol messages.
Summary
The MIDI Protocol and Audio Software Stacks
The Musical Instrument Digital Interface (MIDI) protocol has governed electronic musical instruments and computer audio synthesis for four decades, operating as a trusted, real-time message stream.
Auditing MIDI Parsers and Sound Synthesis Daemons
Anna Antonenko investigates how modern operating systems, digital audio workstations (DAWs), and web browsers parse complex MIDI SysEx and control change packets.
Heap Corruption and Remote Exploitation
Malformed MIDI streams trigger buffer overflows and heap memory corruption in audio parsing libraries. Crafting malicious MIDI files or WebMIDI browser events enables arbitrary code execution on host systems.
Securing Legacy Media Protocol Parsers
Remediating MIDI exploitation requires developers to rewrite legacy C/C++ audio parsing engines in memory-safe languages and enforce strict input length boundaries on all SysEx message handlers.
Related talks
Main Stage·21 min
Noam Moshe
Demonstrates remote code execution and edge compromise across Axis enterprise IP cameras, turning surveillance devices into offensive pivot points.
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
Creator Stage·26 min
Alexandru Lazar
Demonstrates remote code execution vulnerabilities in popular Dahua perimeter surveillance cameras discovered through firmware key extraction.