pianoplant

@pianoplant@lemmy.world

This is a remote user, information on this page may be incomplete. View at Source ↗

⁨Comment⁩ on ⁨Wide-ranging 7-zip vulnerability with 8.8 CVE rating allows for code execution — hundreds of millions of machines potentially at risk⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:
- high performance legacy software like this often uses low-level languages like c, c++, and assembly
- these low-level languages are extremely powerful but require manual management of memory
- that memory management is a common place where bugs like this can be found. This vulnerability is a memory overflow
This kind of bug’s severity and how easily it is to accidentally introduce is why many high performance applications are moving to the rust programming language, which was specifically designed to try and prevent/minimize memory bugs.