fkie-cad/cwe_checker

Health v2 · maintenance only

Adoption not part of the score

1352 stars · 141 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

cwe_checker is a Rust-based suite of checks that detects common bug classes (CWEs) such as null pointer dereferences and buffer overflows in binary executables. It uses Ghidra to disassemble binaries into a common intermediate representation, enabling analysis of ELF binaries across many CPU architectures, making it especially useful for firmware analysis.

Use cases

• find vulnerable patterns in compiled binaries
• scan firmware ELF binaries for CWEs
• detect buffer overflows in executables without source code
• analyze ARM or MIPS binaries for security weaknesses
• integrate binary vulnerability checks into firmware analysis pipelines
• annotate analysis results in Ghidra for reverse engineering

When to choose

• you need to audit binaries without access to source code
• you analyze firmware or cross-compiled ELF binaries for multiple CPU architectures
• you want automated CWE detection integrated into tools like FACT
• you prefer a Docker-based setup that is easy to deploy

When to avoid

• you need dynamic analysis or runtime exploit verification rather than static checks
• you analyze Windows PE or macOS Mach-O binaries, since the focus is ELF
• you need source-code-level static analysis instead of binary analysis
• you require guaranteed low false positives, as results range from heuristics to abstract interpretation

Facets

cli-tool · maturity active

vulnerability-scanning static-site-generator reverse-engineering security parser developer-tools security reverse-engineering developer-tools embedded-systems cli cross-platform cwe binary-analysis ghidra firmware-analysis elf-binaries static-analysis abstract-interpretation plugin-architecture linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="fkie-cad/cwe_checker")