🎖 Honors and Awards
- 2025 Distinguished Reviewer for ICSE 2026 Shadow PC.
- 2021 Defcon World Final 7th (with Nu1L Team).
- 2020.11 National Scholarship (the highest honor for Chinese undergraduates).
🛡️ Vulnerability Disclosure
I have found 32 zero-day vulnerabilities (CVEs) in widely-used software. My work has been acknowledged by the vendors. You can find acknowledgement on bulletins of Adobe, Foxit, and PDF-XChange.
- Adobe Acrobat Reader (5 CVEs): CVE-2025-43575, CVE-2023-21586, CVE-2022-34234, CVE-2022-28234, CVE-2022-35691
- Foxit PDF Reader (17 CVEs): CVE-2025-55307, CVE-2025-55308, CVE-2025-55312, CVE-2025-55313, CVE-2025-55314, CVE-2023-27366, CVE-2022-34873, CVE-2022-34874, CVE-2022-28682, CVE-2022-28683, CVE-2022-37379, CVE-2022-37383, CVE-2022-37380, CVE-2022-37381, CVE-2022-26979, CVE-2022-27359, CVE-2022-27944
- PDF-XChange Editor (4 CVEs): CVE-2025-6661, CVE-2023-39487, CVE-2022-37350, CVE-2022-37349
- Vim (6 CVEs): CVE-2024-45306, CVE-2024-43802, CVE-2024-43790, CVE-2024-43374, CVE-2024-41965, CVE-2024-41957