Use GWP-ASan to detect exploits in production environments
blog.trailofbits.com | blog | #vulnerability-research | #memory-safety | #developer-security | #use-after-free | #mitigation | #gwp-asan | #buffer-overflow | #c-cpp
Summary
GWP-ASan is a sampling-based memory error detector that catches use-after-free, double-free, and heap overflows in production at near-zero overhead, where AddressSanitizer's 2-4x cost is too heavy.
- Published
- Collected
--- id: 1311 title: "Use GWP-ASan to detect exploits in production environments" source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2025/12/16/use-gwp-asan-to-detect-exploits-in-production-environments/" published_at: "2025-12-16 12:00" tags: ["vulnerability-research", "memory-safety", "developer-security", "use-after-free", "mitigation", "gwp-asan", "buffer-overflow", "c-cpp"] phying_url: "https://phying.com/item/1311" lang: en --- # Use GWP-ASan to detect exploits in production environments ## Summary GWP-ASan is a sampling-based memory error detector that catches use-after-free, double-free, and heap overflows in production at near-zero overhead, where AddressSanitizer's 2-4x cost is too heavy. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **Published:** 2025-12-16 12:00 - **Original:** https://blog.trailofbits.com/2025/12/16/use-gwp-asan-to-detect-exploits-in-production-environments/ - **Phying News:** https://phying.com/item/1311