4 ms·
WebAssembly (and asm.js) add additional attack surface to V8, and multiple attacks (including this one) are not possible without that
by kevingadd 6y ago
WebAssembly (and asm.js) add additional attack surface to V8, and multiple attacks (including this one) are not possible without that
- albntomat0 6y agoThe actual bug is in the Turbofan JIT, not WASM. Using WASM is the method de'jour for turning arbitrary read/write/object leak into RCE. Without WASM, the writer would have to use ROP/etc, but the primitives are still there. Check out this discussion by a bunch of the big names in the field, including Niklas B who was on the team that originally found this bug: https://twitter.com/spoofyroot/status/1379911787282243584 https://twitter.com/spoofyroot/status/1379911787282243584