FINDING VULNERABILITY VARIANTS AT SCALE

Summary from the TLDR InfoSec newsletter

BlackWing security found vulnerabilities in a JPEG processing program called jpeg-recompress by analyzing its source code. The company identified two vulnerabilities in the program related to buffer overflow and integer overflow. It discovered over 40 projects with similar vulnerabilities by using automated and manual searches.