CyberzSOC

The Secure by Design initiative seeks to foster a cultural shift across the technology industry, normalizing the development of the Secure by Design Pledge, and stay informed on the latest Secure by Design Alerts. Buffer overflow vulnerabilities are a prevalent type of memory The software development community has safety software design defect that regularly lead to system compromise. The Cybersecurity and Infrastructure Security Agency twenty years of extensive knowledge and (CISA) and Federal Bureau of Investigation (FBI) recognize that effective solutions for buffer overflows— memory safety vulnerabilities encompass a wide range of issues— however, many software manufacturers many of which require significant time and effort to properly continue to expose customers to resolve. While all types of memory safety vulnerabilities can be prevented by using memory safe languages during development, products with these vulnerabilities. other mitigations may only address certain types of memory safety vulnerabilities. Regardless, buffer overflow vulnerabilities are a well understood subset of memory safety vulnerability and can be addressed by using memory safe languages and other proven techniques listed in this Alert.