关于我

Title

Mobile OS platform security (Android, iOS and HarmonyOS NEXT).

Working for

• Aug 2025 ~ Now: Dawn Security Lab (@dawnseclab), JD.com.
• Dec 2022 ~ Jul 2025: ByteDance Wuheng Lab.
• Jul 2019 ~ Dec 2022: Singular Security Lab (@SingularSecLab), Huawei Device Co., Ltd.
• Aug 2015 ~ Jun 2019: Information Security, Civil Aviation University of China

CVEs

• CVE-2025-20955 (SVE-2024-2369) in Samsung Security Updates (May 2025)
• CVE-2024-47151 in Honor Security Notices
• CVE-2024-46941 of Vivo Security Advisory
• CVE-2024-40673 in Android Security Bulletin (October 2024)
• CVE-2023-40130 in Android Security Bulletin (October 2023)
• CVE-2023-20923 in Pixel Update Bulletin (January 2023)
• CVE-2023-21474 (SVE-2023-0068) in Samsung Security Updates (April 2023)

Profiles

• Google Bug Hunters
• Bugcrowd Profile
• Github

Acknowledgements & Rankings

• wrlu on Android Security Acknowledgements, Samsung Mobile Security Acknowledgements, Huawei Bug Bounty Program, Honor Security Response Center.
• 小路 on Vivo Security Response Center

Presentations

• BlackHat Asia 2022: A False Door: Crack the Bluetooth Digital Vehicle Key (Vehicle Security)

Contact

• Email: wrlus_public@outlook.com
• X (aka. Twitter): @wrlu_xiaolu