memory-safety
Safeguard articles tagged "memory-safety" — guides, analysis, and best practices for software supply chain and application security.
49 articles
Heartbleed (CVE-2014-0160): What Happened and What It Changed
A retrospective on the OpenSSL Heartbleed bug, its disclosure in April 2014, and its lasting effect on how the industry handles memory-safety bugs in widely-used crypto libraries.
Eight More Chromium Bugs Confirmed Exploited, Beyond V8
V8, Dawn, Skia, ANGLE, and Chromium's CSS engine each produced confirmed-exploited vulnerabilities — ten total this year across five distinct browser subsystems.
Nine Apple Memory-Safety Bugs Confirmed Exploited Across iOS, macOS, and Safari
Use-after-free, memory corruption, integer overflow — nine Apple vulnerabilities spanning nearly a decade of disclosure dates were confirmed exploited across the company's full platform range.
One Linux Kernel Bug From This Year, One From 2022 — Confirmed Exploited the Same Day
An IPv6 fragmentation bug disclosed weeks earlier and a 2022 watch_queue vulnerability both entered CISA's KEV catalogue on the same day in August 2026.
Two Chrome V8 Vulnerabilities Confirmed Exploited Within Five Days
Two memory-safety bugs in Chrome's V8 engine — out-of-bounds write and type confusion — both confirmed exploited within V8's sandbox in early September 2026.
CVE-2026-8037: When the Function That Escapes Your Input Is the Bug
Progress Kemp LoadMaster's flaw lives inside escape_quotes(), the routine meant to neutralise dangerous input. It fails to null-terminate, turning a sanitiser into unauthenticated command injection.
Buffer overflow vulnerabilities explained
Buffer overflows still make MITRE's CWE Top 25 every year. Here's how they corrupt memory, real CVEs like EternalBlue and Baron Samedit, and how to stop them.
Use-after-free vulnerabilities explained
Use-after-free bugs (CWE-416) power some of the worst zero-day exploit chains in browsers and kernels. Here's how they work and what stops them.
Integer overflow vulnerabilities explained
What integer overflow vulnerabilities are, how CWE-190 causes real breaches like Bitcoin's 2010 overflow bug, and how to detect and prevent them.
Type confusion vulnerabilities explained
Type confusion bugs let attackers corrupt memory by exploiting mismatched type assumptions. See real CVEs, how JIT engines fail, and how to catch it early.
What STATUS_STACK_BUFFER_OVERRUN (0xC0000409) Really Means
The misleadingly named STATUS_STACK_BUFFER_OVERRUN rarely means an active attack — it means a program chose to kill itself the instant it stopped trusting its own memory.
Out-of-Bounds Read Vulnerabilities (CWE-125) Explained
How out-of-bounds read vulnerabilities (CWE-125) leak memory instead of crashing programs, why Heartbleed and Cloudbleed happened, and how to catch them in your dependencies.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.