10 min read
Heap Buffer Overflow: From AddressSanitizer Output to CVE
How heap buffer overflows happen, how to read an AddressSanitizer report, and how a 21-line reproducer became GHSA-8f95-v3jq-cj86 in pymonocypher.
Learn
Autonomous Security Research, Explained.
Technical guides on autonomous vulnerability research, incomplete fix detection, AddressSanitizer-based memory safety analysis, and the methodology behind every finding Vorthix publishes. Written by the team, backed by real CVEs.
11 min read
Heap Use-After-Free: Detection, Exploitation, and Prevention
A technical guide to CWE-416 heap use-after-free bugs: how they occur, how AddressSanitizer catches them, and how to find them before an attacker does.
9 min read
Proof-Based Security Research: Why Zero False Positives Is Possible
Proof-based security research only reports a finding once it reproduces under a sanitizer. Here is what that means in practice, and why it eliminates false positives by construction.
Guide14 min read
Incomplete Fix Detection: Finding Vulnerabilities in Patched Code
How to detect incomplete fix bypasses — the vulnerability class where a patch closes most, but not all, of the paths to a bug. Includes the CVE-2026-56412 case study.