4 ms·
Anyone know how common attacks that take advantage of the JIT technology actually are?
by jayshua 8y ago
Anyone know how common attacks that take advantage of the JIT technology actually are?
- landr0id 8y agoIt's been used consistently to get initial code execution on the PlayStation 4, iOS (for attacks involving just following a web link), and probably used pretty consistently other nation-state attacks but I have no real data to back this up. The Pegasus spyware for instance utilized a JIT attack in JavaScriptCore in Safari for the initial stage.
- olliej 8y agothe RWX memory in JSC has frequently been used as the start of full remote code execution, but has become progressively harder to abuse over the years (via W^X and in newer hardware PAC).