Code Intelligence's Spark AI discovers vulnerability in WolfSSL
Code Intelligence's Spark AI agent discovered a heap-based use-after-free vulnerability in WolfSSL during beta testing by autonomously analyzing code and creating tests. The WolfSSL team patched the flaw in late December 2024 before it could cause documented harm.
What happened
During beta testing, Code Intelligence's Spark AI agent autonomously discovered a heap-based use-after-free vulnerability in WolfSSL, an open-source cryptography library widely used in embedded devices and IoT systems. Human involvement was limited to starting a single command; code analysis, test creation, and execution occurred fully autonomously.
The vulnerability could have caused unexpected behavior, crashes, or security breaches. The WolfSSL team fixed the issue immediately and released a corrected version in late December 2024.
Reported impact
The vulnerability was discovered before causing documented harm, as WolfSSL patched it promptly upon notification.
Index analysis
Spark identified the vulnerability through autonomous fuzzing of WolfSSL's codebase, demonstrating the system's capability to detect security flaws without human interaction beyond initiating the test.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.