Project Zero is Google's security research team dedicated to finding and fixing zero-day vulnerabilities in software and hardware, aiming to improve the security of the broader internet ecosystem. Security researchers can learn about vulnerability research, exploit development, and responsible disclosure practices to contribute to making the internet safer for everyone.

Project Zero

ARM proposed a hardware implementation of tagged memory, referred to MTE (Memory Tagging Extensions) In Part 1 we discussed testing the technical (and implementation) limitations of MTE on the hardware that we've had access to. This post will now consider the implications of what we know on the effectiveness of M TE-based mitigations.

Project Zero: MTE As Implemented, Part 2: Mitigation Case Studies