# FuzzSlice: Separating real CVEs from fakes through fuzzing

DevFeed: [FuzzSlice: Separating real CVEs from fakes through fuzzing](<https://devfeed.tech/articles/fuzzslice-separating-real-cves-from-fakes-through-fuzzing-13055.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/fuzzslice-separating-real-cves-from-fakes-through-fuzzing>)

Published: 2024-09-19T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Fuzzing/Fuzz testing](<https://devfeed.tech/topics/fuzzing.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [openssl](<https://devfeed.tech/topics/openssl.md>), [Security](<https://devfeed.tech/topics/security.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>)

Tags: [cves](<https://devfeed.tech/tags/cves.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [fuzzing](<https://devfeed.tech/tags/fuzzing.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [security](<https://devfeed.tech/tags/security.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>)

## AI overview

Chainguard Labs presents FuzzSlice, a fuzzing technique for determining whether CVEs are exploitable within an application context. In an evaluation of 18 OpenSSL CVEs, it classified 12 as exploitable and six as unreachable or false positives.

## Source excerpt

Chainguard Labs explores FuzzSlice, a novel fuzzing technique, to improve vulnerability remediation by distinguishing exploitable CVEs from false positives.