cve-rs is a memory safety testing framework and vulnerability simulator designed to recreate buffer overflows and segmentation faults. It provides a set of safe memory primitives and a WebAssembly-based security sandbox to evaluate how programs handle unsafe memory access within an isolated execution environment.
The project replaces raw pointer manipulation and type transmutation with functional alternatives, allowing for the simulation of memory-unsafe operations. It enables the reinterpretation of data types through memory representation manipulation rather than unsafe casting to study the impact of memory corruption bugs.
These capabilities support a vulnerability research workflow where simulated exploits are executed within a WebAssembly runtime. This isolation prevents simulated memory errors from causing host system instability while testing security boundaries.