Google's AI Tool Finds First Real-World Zero-Day Vulnerability in SQLite

Nov 5, 2024, 05:20 AM

Google's AI tool, Big Sleep, has discovered a zero-day vulnerability in the widely used SQLite database engine. This marks the first publicly known instance of an AI agent identifying a previously unknown, exploitable memory-safety issue in real-world software. The discovery was made by Google's Project Zero team in collaboration with DeepMind, utilizing the Gemini 1.5 Pro model. The vulnerability, a stack buffer underflow, was found in the SQLite development branch before its public release. This breakthrough demonstrates the potential of AI in proactively detecting and addressing software vulnerabilities, highlighting a significant advancement in cybersecurity.