Re:Google assigns a CVE for libwebp and gives it a 10.0 score
by UncleMeat on Tuesday September 26, 2023 @03:01PM
(#37664209)
This isn't even the problem. There are shitloads of open bugs found by fuzzing, even in the linux kernel, that nobody is fixing. Serious security vulns in the kernel regress because of lack of tests.
It is clear that even if we stood up the best bug finding systems the world has ever seen that critical software will still be a disaster.
It is clear that even if we stood up the best bug finding systems the world has ever seen that critical software will still be a disaster.