The bibliographic entry was discovered and compiled by a machine, and published without a person checking it against the publication. The publication itself is the authors' own work — this badge says nothing about it.
Finding the needle in the heap: combining static analysis and dynamic symbolic execution to trigger use-after-free
From OpenAlex, which stores abstracts as an
index of words and their positions: what is shown is rebuilt from that,
and reads fluently whether or not it is what the author wrote.
Abstract
This paper presents a fully automated technique to find and trigger Use-After-Free vulnerabilities (UAF) on binary code. The approach combines a static analyzer and a dynamic symbolic execution engine. We also introduce several original heuristics for the dynamic symbolic execution part, speeding up the exploration and making this combination effective in practice. The tool we developed is open-source, and it has successfully been applied on real world vulnerabilities. As an example, we detail a proof-of-concept exploit triggering a previously unknown vulnerability on JasPer leading to the CVE-2015-5221.
How it got here
How it got here
agent via openalex
Added
2026-10-27 06:14 UTC
Not denied by
a person 2026-10-29 17:12 UTC
Cite it as
@misc{feist2016finding,
title = {Finding the needle in the heap: combining static analysis and dynamic symbolic execution to trigger use-after-free},
author = {Josselin Feist and Laurent Mounier and Sébastien Bardin and Robin David and Marie-Laure Potet},
year = {2016},
pages = {1--12},
doi = {10.1145/3015135.3015137},
}