When Java Plays Unsafe: How a Single Mistake Can Break Memory Safety

No ratings

Presented at BSides London 2025 by

Thomas Leplus

Despite its reputation as a memory-safe language, Java has a dangerous side. In this talk, we will show that a single coding slip or the wrong third-party dependency can compromise your application's memory safety. You’ll learn: - What is memory safety and why it matters (even in Java)? - How attackers can exploit hidden dangers like the Unsafe class. - Safer alternatives like the Foreign Function and Memory API. Perfect for developers, architects, and security professionals, this talk bridges the gap between theory and practice, and aligns with today’s growing industry focus on memory safety and software supply chain security.