Multi-Target Coverage-Based Greybox Fuzzing: Simultaneous Vulnerability Discovery Across Multiple Code Regions

arXiv·medium signal

A new multi-target coverage-guided greybox fuzzing technique simultaneously targets multiple suspicious code locations rather than sequential single-target directed fuzzing. The method assigns runtime suspiciousness scores to guide mutation toward uncovered paths across all targets in a single campaign. Applied to Linux kernel and firmware testing, achieving higher vulnerability yield per CPU-hour than running separate directed fuzzing campaigns for each target — directly relevant to anyone fuzzing system software or AI infrastructure.