FORGE Lab uses agentic tools to identify memory safety issues in Rust | Microsoft Security Blog

Microsoft's FORGE Lab used agentic vulnerability-scanning tools to identify memory safety issues and soundness bugs within Rust's standard library. The findings revealed recurring patterns of misplaced trust in unsafe code, including code panics during invariant restoration, user-provided trait implementations, and process-wide system state. Researchers reported the issues to Rust maintainers, highlighting the challenges of maintaining memory safety guarantees at system boundaries. Open article →