Detection, exploitation and mitigation of memory errors.

The article focuses on memory corruption vulnerabilities arising from memory safety violations in programs written primarily in C and C++, which lack automatic memory management. It categorizes memory errors into spatial errors, temporal errors, and type confusion, and examines how attackers exploit these flaws through techniques such as code injection, code reuse (including Return Oriented Programming), and non-control data attacks. The paper also reviews mitigation strategies like Control-Flow Integrity (CFI), Address Space Layout Randomisation (ASLR), and Data-Flow Integrity (DFI), alongside detection methods including fuzz testing, static analysis, symbolic execution, and sanitizers. Despite extensive research and numerous defense mechanisms, memory corruption remains a persistent security challenge, underscoring the need for continued investigation in this area.