{"id":59359,"date":"2024-11-05T08:36:35","date_gmt":"2024-11-05T08:36:35","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2024\/11\/05\/google-claims-ai-first-after-sqlite-security-bug-discovered-the-register\/"},"modified":"2024-11-05T08:37:52","modified_gmt":"2024-11-05T08:37:52","slug":"google-claims-ai-first-after-sqlite-security-bug-discovered-the-register","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2024\/11\/05\/google-claims-ai-first-after-sqlite-security-bug-discovered-the-register\/","title":{"rendered":"Google claims AI first after SQLite security bug discovered \u2022 The Register"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

Google claims one in every of its AI fashions is the primary of its type to identify a reminiscence security vulnerability within the wild \u2013 particularly an exploitable stack buffer underflow in SQLite \u2013 which was then fastened earlier than the buggy code’s official launch.<\/p>\n

The Chocolate Manufacturing facility’s LLM-based bug-hunting device, dubbed Massive Sleep, is a collaboration between Google’s Challenge Zero and DeepMind. This software program is claimed to be an evolution of earlier Challenge Naptime, introduced in June.\u00a0<\/p>\n

SQLite is an open supply database engine, and the stack buffer underflow vulnerability<\/a> may have allowed an attacker to trigger a crash or even perhaps obtain arbitrary code execution. Extra particularly, the crash or code execution would occur within the SQLite executable (not the library) as a result of a magic worth of -1 by accident getting used at one level as an array index. There’s an assert() within the code to catch using -1 as an index, however in launch builds, this debug-level examine could be eliminated.<\/p>\n

\n