Generating vulnerability reports based on application binary interface/application programming interface usage

A system comprising:

• a memory to store instructions for generating vulnerability reports;
• and
• a processing device communicably coupled to the memory, the processing device to:
• extract a binary file and a security report relating to a software program executed by the processing device, the security report having a vulnerability list of pending vulnerabilities, wherein the vulnerability list relating to the software program;
• detect, from the binary file, interface usage details associated with interfaces used by the software program and associated with shared libraries used by the software program, wherein the interfaces comprise application programming interfaces (APIs) corresponding to rules that the software program follows to access and use services and resources provided by another software program;
• match the interface usage details with the pending vulnerabilities of the vulnerability list;
• and
• generate a vulnerability report based on the matching, wherein the vulnerability report comprises a list of the pending vulnerabilities based on their associated interface usage.

A non-transitory machine-readable medium including instructions that, when executed by a processing device, cause the processing device to perform operations comprising:

• extracting, by the processing device, a binary file and a security report relating to a software program executed by the processing device, the security report having a vulnerability list of pending vulnerabilities, wherein the vulnerability list relating to the software program;
• detecting, from the binary file, interface usage details associated with interfaces used by the software program and associated with shared libraries used by the software program, wherein the interfaces comprise application programming interfaces (APIs) corresponding to rules that the software program follows to access and use services and resources provided by another software program;
• matching the interface usage details with the pending vulnerabilities of the vulnerability list;
• and
• generating a vulnerability report based on the matching, wherein the vulnerability report comprises a list of the pending vulnerabilities based on their associated interface usage.