- cross-posted to:
- rust@programming.dev
- cross-posted to:
- rust@programming.dev
You must log in or # to comment.
Are memory errors in C and C++ the reason for the majority of modern security vulnerabilities?
Just ran across this post and your comment by chance, but well, yes:
The importance of memory safety cannot be overstated: a 2019 study estimated that 66% of Common Vulnerabilities and Exposures (CVEs) for iOS 12 and 71% of CVEs for Mojave were caused by memory safety issues. […] a Google Project Zero review of exploits detected in-the-wild estimates that 75% of CVEs used in those exploits were memory safety vulnerabilities. Out of the 58 in-the-wild zero-days discovered in 2021, 67% were memory safety vulnerabilities.
