Buffer Overflow Vulnerabilities
Cluster focuses on debates about buffer overflows, integer overflows, use-after-free bugs, and other memory safety issues, including their exploitability, classification, and relation to unsafe languages like C.
Activity Over Time
Top Contributors
Keywords
Sample Comments
It's more often use-after-free or heap buffer overrun bugs, these days.
If we're nitpicking, doesn't this technically not still allow a buffer overflow, just negate the consequences of it?
A buffer overflow isn't a memory safety issue?
Has an exploitable buffer bleed (I'm happy with this coinage!) happened in any recent memory safe codebase?
Bog standard buffer overflow caused by incorrect bounds checking. Yes.
How can buffer overflows still be happening in this day and age?
Integer overflow bug causing manual memory allocation bug leading to RCE. All too common. We need to stop relying on software written in unsafe languages.
If this had a buffer overflow vulnerability it'd be perfect ;0
No, but memory corruption related to pointers misuse or unsigned arithmetic is.
Technically it's not a buffer overflow; it's an integer overflow bug.