{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/google-big-sleep-sqlite-first-vulnerability-2024/",
 "asOf": "2026-09-26",
 "id": "google-big-sleep-sqlite-first-vulnerability-2024",
 "date": "2024-11-01",
 "datePrecision": "day",
 "title": "Google's Big Sleep agent finds exploitable stack buffer underflow in SQLite before release",
 "lane": "defense",
 "kind": "vulnerability-disclosure",
 "summary": "Google Project Zero and Google DeepMind report that Big Sleep, an LLM agent evolved from Project Naptime, found an exploitable stack buffer underflow in SQLite during a variant-analysis experiment seeded with newly landed commits. The bug was reported in early October 2024 and fixed the same day, before it appeared in an official release; Google believes this was the first public example of an AI agent finding such a memory-safety flaw in widely used software.",
 "whyItMatters": "It marked the move from benchmark results to a real, previously unknown vulnerability found by an LLM agent and fixed before users were exposed.",
 "actors": [
  "google-project-zero",
  "google-deepmind",
  "sqlite"
 ],
 "topics": [
  "vulnerability-discovery"
 ],
 "atlas": [],
 "artifacts": [
  "big-sleep"
 ],
 "sources": [
  {
   "url": "https://projectzero.google/2024/10/from-naptime-to-big-sleep.html",
   "publisher": "Google Project Zero",
   "title": "From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code",
   "date": "2024-11-01",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "The vulnerability was found and reported in early October and fixed by SQLite developers the same day; it never reached an official release.",
   "locator": "Introduction"
  },
  {
   "fact": "Existing testing infrastructure, including OSS-Fuzz and SQLite's own, had not found the issue.",
   "locator": "Introduction"
  },
  {
   "fact": "The agent was given newly landed SQLite commits and diffs and asked to look for related unfixed issues at HEAD (variant analysis).",
   "locator": "Section 'Methodology'"
  }
 ],
 "significance": 4,
 "fideQuestions": [],
 "methods": [
  "ai-vulnerability-discovery"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}