Rust와 C/C++의 메모리 안전성 CVE는 왜 다르게 집계되는가

The article challenges directly comparing CVE counts between Rust and C/C++ for assessing memory safety, as both ecosystems employ fundamentally different reporting standards. While C/C++ treats API misuse as user error and doesn't report all potential memory bugs as CVEs, Rust holds libraries strictly accountable for memory safety even in safe API calls, creating different vulnerability reporting practices. Understanding these distinct approaches is critical for accurately evaluating memory safety claims and making informed technology adoption decisions.