cve-rs is a Rust library that allows you to introduce common memory vulnerabilities into your program while maintaining memory safety.
The tool addresses the limitation that safe Rust prevents you from writing code that could corrupt memory. cve-rs solves this by implementing memory vulnerabilities—use-after-free, buffer overflow, and segmentation faults—entirely in safe Rust code without any unsafe blocks. It achieves this through safe reimplementations of dangerous operations like transmute and null reference creation, allowing developers to simulate or test vulnerability behavior without actually compromising memory safety.
The project is suitable for developers who need to test how their Rust programs handle memory corruption scenarios, educational purposes, or security research. It supports both standard Rust compilation and WebAssembly through WASI, as well as browser-based WebAssembly execution. The tool's entire codebase uses #![deny(unsafe_code)], meaning there are no unsafe blocks in the implementation itself, which is unusual for a library designed to simulate unsafe behavior.
The project maintains a lighthearted tone throughout its documentation and appears to be a proof-of-concept or educational tool rather than production software, as indicated by its licensing choice and the humorous framing of its capabilities.
