Curated security research, vulnerabilities, advisories and tools for practitioners.

#cpp

Security coverage tagged cpp.

1.

Counterfeit Object-Oriented Programming

blog | 2026-06-05 00:00 | bugpwn.com | original ↗ | #vulnerability-research | #exploitation | #binary-exploitation

2.

Compiler bug causes compiler bug: how a 12-year-old g++ bug took down Solidity

blog | 2025-08-11 00:00 | osec.io | original ↗ | #cpp | #compiler | #solidity

3.

Sanitize your C++ containers: ASan annotations step-by-step

blog | 2024-09-10 13:00 | blog.trailofbits.com | original ↗ | #memory-safety | #llvm | #cpp

4.

Understanding AddressSanitizer: Better memory safety for your code

blog | 2024-05-16 13:00 | blog.trailofbits.com | original ↗ | #rce | #memory-safety | #fuzzing

5.

The life and times of an Abstract Syntax Tree

blog | 2024-05-02 13:00 | blog.trailofbits.com | original ↗ | #ast | #cpp | #compilers

6.

The Art of Detecting Memory Leaks in C++ Applications

blog | 2024-02-26 00:56 | hackerone.com | original ↗ | #debugging | #hackerone | #dynamic-analysis

7.

LLVM's 'RFC: C++ Buffer Hardening' at Google

blog | 2024-02-12 00:00 | bughunters.google.com | original ↗ | #memory-safety | #secure-coding | #google

8.

Catching OpenSSL misuse using CodeQL

blog | 2023-12-22 14:00 | blog.trailofbits.com | original ↗ | #appsec | #cryptography | #c

9.

Typos that omit security features and how to test for them

blog | 2023-04-20 11:00 | blog.trailofbits.com | original ↗ | #secure-coding | #c | #cpp

10.

High-fidelity build instrumentation with blight

blog | 2020-11-25 14:38 | blog.trailofbits.com | original ↗ | #open-source | #python | #c

11.

Detecting Iterator Invalidation with CodeQL

blog | 2020-10-09 12:30 | blog.trailofbits.com | original ↗ | #vulnerability-research | #vulnerabilities | #static-analysis

12.

Verifying Windows binaries, without Windows

blog | 2020-05-27 11:50 | blog.trailofbits.com | original ↗ | #open-source | #windows | #cryptography

13.

Wrapper's Delight

blog | 2019-08-26 10:50 | blog.trailofbits.com | original ↗ | #open-source | #engineering | #database

14.

Use constexpr for faster, smaller, and safer code

blog | 2019-06-27 10:50 | blog.trailofbits.com | original ↗ | #static-analysis | #cpp | #compilers

15.

Fuzzing Unit Tests with DeepState and Eclipser

blog | 2019-05-31 11:00 | blog.trailofbits.com | original ↗ | #fuzzing | #cpp | #symbolic-execution

16.

How McSema Handles C++ Exceptions

blog | 2019-01-21 12:50 | blog.trailofbits.com | original ↗ | #reverse-engineering | #cpp | #compilers

17.

Accelerate Azure DevOps or TFS with JFrog Artifactory and Conan

blog | 2018-10-29 09:19 | jfrog.com | original ↗ | #cloud | #package-management | #tutorial

18.

Unaligned accesses in C/C++: what, why and solutions to do it properly

research | 2018-10-15 22:00 | blog.quarkslab.com | original ↗ | #c | #cpp | #programming

19.

Back from CppCon 2018

research | 2018-10-10 22:00 | blog.quarkslab.com | original ↗ | #conference | #cpp | #elf

20.

Easy::jit: Just-In-Time compilation for C++

research | 2018-07-09 22:00 | blog.quarkslab.com | original ↗ | #open-source | #jit | #performance

21.

Frozen - zero cost initialization for immutable containers and various algorithms

research | 2018-02-19 23:00 | blog.quarkslab.com | original ↗ | #open-source | #containers | #performance

22.

Frozen - An header-only, constexpr alternative to gperf for C++14 users

research | 2017-05-21 22:00 | blog.quarkslab.com | original ↗ | #open-source | #containers | #cpp

23.

Back from CppCon 2016

research | 2016-10-04 22:00 | blog.quarkslab.com | original ↗ | #conference | #report | #llvm