# Triggering and Detecting Exploitable Library Vulnerability from the Client by Directed Greybox Fuzzing

Source: [Triggering and Detecting Exploitable Library Vulnerability from the Client by Directed Greybox Fuzzing](<https://www.sota2.com/research/paper/69d48fd67d0172140ec7465e>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-04-08T05:00:12.103Z

Authors: Yukai Zhao, Menghan Wu, Xing Hu, Shaohua Wang, Meng Luo, Xin Xia

Published: 2026-04-05T12:54:05.000Z

## Abstract

Developers utilize third-party libraries to improve productivity, which also introduces potential security risks. Existing approaches generate tests for public functions to trigger library vulnerabilities from client programs, yet they depend on proof-of-concepts (PoCs), which are often unavailable. In this paper, we propose a new approach, LiveFuzz, based on directed greybox fuzzing (DGF) to detect the exploitability of library vulnerabilities from client programs without PoCs. LiveFuzz exploits a target tuple to extend existing DGF techniques to cross-program scenarios. Based on the target tuple, LiveFuzz introduces a novel Abstract Path Mapping mechanism to project execution paths, mitigating the preference for shorter paths. LiveFuzz also proposes a risk-based adaptive mutation to mitigate excessive mutation. To evaluate LiveFuzz, we construct a new dataset including 61 cases of library vulnerabilities exploited from client programs. Results show that LiveFuzz increases the number of target-reachable paths compared with all baselines and improves the average speed of vulnerability exposure. Three vulnerabilities are triggered exclusively by LiveFuzz.

## Recorded benchmark results

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

- [Vulnerability Reproduction on CVE-based Vulnerability Dataset](<https://www.sota2.com/research/sota/vulnerability-reproduction-on-cve-based-vulnerability-dataset.md>): Vulnerability Reproduction; CVE-based Vulnerability Dataset; Success Rate (Rs): 10.

## Original sources and implementation

[Original paper](<https://arxiv.org/abs/2604.04102>)

[PDF](<https://arxiv.org/pdf/2604.04102.pdf>)