memory-safety
Safeguard articles tagged "memory-safety" — guides, analysis, and best practices for software supply chain and application security.
48 articles
Use-After-Free Vulnerability: How It Works and How to Prevent It
A use-after-free vulnerability happens when a program keeps using memory it already released. Here is why it is dangerous, how attackers exploit it, and how to catch it.
Buffer Streams: Handling Binary Data Safely in Node.js
Buffer streams are how Node.js moves binary data without loading it all into memory. Here is how they work and the security bugs that hide in buffer handling.
What is a Buffer Overflow
Buffer overflows have powered exploits from the 1988 Morris Worm to WannaCry. Here's how they work, why they persist, and how to stop them.
Zig's Memory Safety Model: A Security Analysis for Systems Programmers
Zig offers memory safety features that C lacks but does not go as far as Rust. For security-critical code, understanding where Zig sits on the safety spectrum matters.
What is Fuzzing
Fuzzing feeds programs malformed input at machine speed to trigger crashes and expose memory-safety bugs. Here's how fuzz testing works and why it matters.
Rust Security Explained
Rust kills most memory-safety bugs, but crates.io supply chain attacks and CVE-2024-24576 prove "written in Rust" isn't a security guarantee.
C/C++ Security Explained
C/C++ still cause ~70% of critical CVEs. From Heartbleed to the xz backdoor, here's why memory bugs persist and how to find exploitable ones fast.
CISA's Memory-Safe Languages Roadmap: What It Means for Software Development
CISA publishes a roadmap urging the industry to transition to memory-safe programming languages, targeting the root cause of roughly 70% of critical vulnerabilities.
Rust memory safety vulnerabilities despite the borrow che...
The borrow checker doesn't stop everything. Here's how rust unsafe code vulnerabilities slip past Rust's safety guarantees and reach production.
Rust Adoption in Security-Critical Software: Where We Stand
Rust promises memory safety without garbage collection. Here is an honest look at where adoption stands and what it means for supply chain security.
Memory Safety Bugs in C/C++ Dependencies: The Hidden Risk in Your Software Supply Chain
C and C++ libraries still power critical infrastructure everywhere. Their memory safety issues are your problem whether you write C or not.
Image Parsing Vulnerabilities in Dependencies: The Pixel-Level Threat
Every application that processes images depends on parsing libraries with a long history of memory corruption bugs. Here is what is at stake.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.