Definition
Symbolic execution runs a program with symbolic rather than concrete inputs, building up logical constraints describing each path through the code. It can prove properties and find inputs that hit deep bugs, with the well-known weakness that the path space blows up fast on real programs.
Episodes covering this
Worth reading next
Papers we haven't done a deep dive on yet, but would recommend on this topic.