Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2023-39471] Finding Vulnerabilities in Firmware with Static Analysis Platform QueryX

theori.io | vulnerability | CVE-2023-39471 | #firmware | #static-analysis | #taint-analysis | #queryx | #cve-2023-39471

Summary

How Theori’s QueryX platform applies taint analysis and abstract interpretation to variant analysis of closed-source firmware, including the discovery of CVE-2023-39471 and other embedded-device bugs.
Published
Collected

original ↗

Related coverage

  1. One year of Opengrep: What we built and what’s next (aikido.dev)
  2. SAST Tools: Core Features & How to Choose the Best SAST Solution (aikido.dev)
  3. Offensive Security with Large Language Models (2) (theori.io)
  4. Rust-proof your code with our new Testing Handbook chapter (blog.trailofbits.com)
  5. Cracking Firmware with Claude: Senior-Level Skill, Junior-Level Autonomy (bishopfox.com)
  6. Black Box Probing: a Security Analysis of Xiaomi's MJA1 Secure Chip (blog.quarkslab.com)

back