The
percentage of security vulnerabilities in software that are caused by memory safety issues, as reported by sources such as Microsoft and the Chromium browser project. This number is often repeated as an argument in favor of using memory-safe
programming languages for critical software projects.
Industry analysis has shown in some cases, that despite rigorous code reviews as well as other preventive and
detective controls, up to 70 percent of security vulnerabilities in memory unsafe
languages patched and assigned a CVE designation are due to
memory safety issues.
Dev A: Damn, another segfault. I wonder what happened.
Dev B: Another 70% moment,
that's what happened.