This paper presents a static vulnerability detection and patching framework at both source code and binary level. It collects source code known vulnerability information and automatically identifies and extracts binary vulnerability information. Using the known vulnerabilities, it matches similar vulnerable functions and filters out the ones that have been patched in the target program. For the vulnerable functions, the framework tries to generate hot patches by learning from the source code.