🔧 LLMs Generate Vulnerable C/C++ Code: Self-Review Fails to Mitigate Security Flaws

Introduction


Large Language Models (LLMs) exhibit a systemic propensity to generate C/C++ code that, while syntactically valid, is inherently insecure. A rigorous analysis employing formal verification via the Z3 SMT solver exposes a critical failure mode: 55.8% of LLM-generated C/C++ code harbors verifiable security vulnerabilities. Compounding...