Rust turns 10: How a broken elevator changed software forever

https://www.zdnet.com/article/rust-turns-10-how-a-broken-elevator-changed-software-forever/

34 points · 2 comments · view on lemmy.world

2 Comments

pineapple@lemmy.ml · 2 pts · 1y (1 reply)

Are memory errors in C and C++ the reason for the majority of modern security vulnerabilities?

Ephera@lemmy.ml · 1 pts · 326d

Just ran across this post and your comment by chance, but well, yes:

The importance of memory safety cannot be overstated: a 2019 study estimated that 66% of Common Vulnerabilities and Exposures (CVEs) for iOS 12 and 71% of CVEs for Mojave were caused by memory safety issues. [...] a Google Project Zero review of exploits detected in-the-wild estimates that 75% of CVEs used in those exploits were memory safety vulnerabilities. Out of the 58 in-the-wild zero-days discovered in 2021, 67% were memory safety vulnerabilities.

Source: https://media.defense.gov/2025/Jun/23/2003742198/-1/-1/0/CSI_MEMORY_SAFE_LANGUAGES_REDUCING_VULNERABILITIES_IN_MODERN_SOFTWARE_DEVELOPMENT.PDF