[bastawhiz]

Even still, pure interpreters are not immune to vulnerabilities. One buffer overflow or bad array lookup and you're hosed.

[wglb]

I must admit that I haven't heard of buffer overflows in emacs lisp.

[hollerith]

Right. When all of the language's data structures are garbage collected and the language has no pointer types, buffer overflows become much rarer.

There are a few array-lookup operations like AREF, but they do bounds checking (at run time, when the check is easier to get right).