Since EasyMem is a memory management library (often used in performance-critical or bare-metal environments), any bugs related to pointer tagging, LLRB-tree integrity, or XOR-magic validation are treated as critical security vulnerabilities.
Currently, only the main branch and the latest active development release (v0.5.x) are supported with security updates.
| Version | Supported |
|---|---|
| 0.5.x | ✅ |
| < 0.5.0 | ❌ |
If you have discovered a vulnerability that allows heap corruption, arbitrary code execution, or bypasses the internal safety checks, please do not open a public GitHub issue.
Instead, please report it privately:
- Email me directly at: gooderfreed@gmail.com
- Provide a brief description of the exploit.
- If possible, include a minimal reproducible C snippet or a
libFuzzercrash dump.
I will acknowledge receipt of your vulnerability report within 48 hours and work with you to patch it before public disclosure.