Why Memory Safety is Critical for Embedded Devices & Critical Infrastructure

In this video, RunSafe Security CTO Shane Fry explains why memory safety matters, how these vulnerabilities persist, and what organizations can do to reduce their risk.

Memory Safety in Embedded Devices & Critical Infrastructure

The Growing Risk of Memory Safety Vulnerabilities in Embedded Systems

Memory safety vulnerabilities are a major security issue in embedded devices and critical infrastructure, with 70% of industrial control system flaws stemming from memory-related weaknesses. These vulnerabilities don’t just exist—they persist, often lingering in devices for years before they are patched, leaving critical systems exposed to remote exploitation.

In this video, RunSafe Security CTO Shane Fry explores:

  • Why memory safety is the root cause of many cybersecurity threats in embedded systems

  • How vulnerabilities like Urgent 11 and Ripple 20 have remained in devices for over a decade

  • The challenges in patching these security flaws, with some fixes taking years to deploy

  • How organizations can prevent memory safety vulnerabilities from being exploited in the first place

By addressing these vulnerabilities at their root, security teams can significantly reduce the risks associated with unpatched embedded systems. Watch now to learn more about securing critical infrastructure from memory safety threats.

CRA Readiness: Build an SBOM You Can Act On

CRA Readiness: Build an SBOM You Can Act On

Under the Cyber Resilience Act, having an SBOM is only the beginning. Manufacturers need to know exactly what software is in each product release and be able to quickly determine which products are affected when a new vulnerability emerges. For embedded software, that...

read more
Operational Software Assurance

Operational Software Assurance

Security Cannot Stop When Software Ships Critical software can remain deployed for years or even decades. During that time, new vulnerabilities emerge, threats evolve, and AI is accelerating both vulnerability discovery and exploit development. But patching, testing,...

read more