An AI agent in the fuzzing loop: re-finding CVE-2017-11729 in libming
Re-finding CVE-2017-11729, a heap over-read in libming's SWF decompiler, with an AI coding agent running the fuzzing. Here's where it tried to lie to me.
#cve
2 posts
Check reachability before you fuzz for a CVE
When I pick a known CVE to re-find by fuzzing, the question that matters isn't how bad the bug is or who found it. It's how many conditions a fuzzer has…