Intern-Decision-4B finds memory-safety bugs at scale

Researchers investigated whether small, open-weight decision models can support vulnerability discovery in open-source software at scale. Using a harness with deterministic incomplete-fix miners and shape localizers, a 4B-parameter model scored candidate functions to prioritize search queues rather than directly accepting or rejecting them. Across thousands of projects, the approach successfully confirmed 187 memory-safety findings, demonstrating that small decision models can aid vulnerability prioritization when combined with deterministic analysis. Open article →