Comment on Wide-ranging 7-zip vulnerability with 8.8 CVE rating allows for code execution — hundreds of millions of machines potentially at risk

GalacticGrapefruit@lemmy.world ⁨1⁩ ⁨week⁩ ago

• pianoplant@lemmy.world ⁨1⁩ ⁨week⁩ ago

  • high performance legacy software like this often uses low-level languages like c, c++, and assembly
  • these low-level languages are extremely powerful but require manual management of memory
  • that memory management is a common place where bugs like this can be found. This vulnerability is a memory overflow

  This kind of bug’s severity and how easily it is to accidentally introduce is why many high performance applications are moving to the rust programming language, which was specifically designed to try and prevent/minimize memory bugs.

  source