Asking a language model whether a CVE affects your code is easy. Deciding when not to believe the answer is the hard part. On one real project we started with a hundred critical CVEs and went through them by hand. Seven or eight out of ten could not be reached from our code. That ratio comes from one codebase, so treat it as an anecdote. Anyone... Weiterlesen: CVE reachability with an LLM and a code graph
Intelligence View
⚡ tsecurity.de Intelligence
CVE reachability with an LLM and a code graph
Asking a language model whether a CVE affects your code is easy. Deciding when not to believe the answer is the hard part. On one real project we started with…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
28 źródeł
CVE-2026-98432 Linux kernel IPv4 TCP flaw: status for CloudLinux
27 kolejnych źródeł
VVulDB Updatesvor 4 Std.CVE-2024-38625 | Linux Kernel up to 6.6.32/6.9.3 ntfs3 null pointer dereference (6c8054d59066/ff1068929459/1cd6c96219c4) VVulDB Updatesvor 4 Std.CVE-2024-38570 | Linux Kernel up to 6.6.32/6.8.11/6.9.2 gfs2 sd_dead_glocks use after free (Nessus ID 207818 / WID-SEC-2024-1418) VVulDB Updatesvor 4 Std.CVE-2024-36968 | Linux Kernel up to 6.6.31/6.8.10/6.9.1 Bluetooth l2cap_le_flowctl_init buffer overflow (Nessus ID 212722) VVulDB Updatesvor 4 Std.CVE-2024-36881 | Linux Kernel up to 6.6.30/6.8.9 userfaultfd close memory corruption (377f3a9a3d03/8d8b68a5b0c9/c88033efe9a3 / WID-SEC-2024-1259) VVulDB Updatesvor 4 Std.CVE-2024-27041 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 amdgpu_dm_fini null pointer dereference (WID-SEC-2024-1008) VVulDB Updatesvor 4 Std.CVE-2023-52653 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 SUNRPC gss_import_v2_context memory leak (Nessus ID 209785 / WID-SEC-2024-1008)
+21
19 źródeł
Binance Reports $6.3 Billion Crypto Hack as Partners Race to Freeze Funds
18 kolejnych źródeł
GGBHackers Securityvor 2 Std.North Korean Hackers Steal $6.36 Billion From Binance in Largest Crypto Hack Ever RSS«Hacker News» 🗞️🦾 IT BOLTWI…vor 1 Std.Binance-Hack: Börse versichert Kundengelder sicher, 5 Mrd. Rückstellung GGoogle Alertvor 2 Std.Wie sicher sind unsere Bitcoins nach dem Binance-Hack wirklich? - it-daily.net GGoogle Alertvor 1 Std.Cybersicherheit: Größter Krypto-Hack trifft Börse Binance | ndr.de SSecurity Magazinevor 1 Std.North Korea May Be Behind the $6.3B Binance Hack GGoogle Alertvor 5 Std.Binance-Hack: Über 6 Milliarden Dollar gestohlen - IT-Administrator.de
+12
14 źródeł
GitHub Release: google-ai-edge/LiteRT-LM v0.19.0 (30.10.2026)
13 kolejnych źródeł
GGitHubvor 1 Std.GitHub Release: matomo-org/matomo v6.1.0-alpha.20261030180418 (30.10.2026) GGitHubvor 1 Std.GitHub Release: openclaw/openclaw vrelease-publish/a3df6c6c8118-1793383326 (30.10.2026) GGitHubvor 1 Std.GitHub Release: openclaw/openclaw vrelease-publish/385f0d8eaaf1-1793384660 (30.10.2026) VVulDB Updatesvor 4 Std.CVE-2026-95274 | Google Chrome up to 153.0.8010.52 DevTools cross site scripting (WID-SEC-2026-3514) VVulDB Updatesvor 4 Std.CVE-2026-95275 | Google Chrome up to 153.0.8010.52 MediaStream privileges management (WID-SEC-2026-3514) VVulDB Updatesvor 4 Std.CVE-2026-95277 | Google Chrome up to 153.0.8010.52 Views use after free (WID-SEC-2026-3514)
+7
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4309064/bezpieczne-programowanie/cve-reachability-with-an-llm-and-a-code-graph/