Yeah I wasn't precise enough, I wrote a better summary here: https://news.ycombinator.com/item?id=26996738 https://news.ycombinator.com/item?id=26996738 tl;dr

Yeah I wasn't precise enough, I wrote a better summary here: https://news.ycombinator.com/item?id=26996738 https://news.ycombinator.com/item?id=26996738 tl;dr A bad case is if something like Figma stores your credit card info on the server. If they have a buffer overflow + document.write() of HTML derived from wasm code, the person who controls the image data could steal your credit card info. This is basically example 5.1; Figma is a huge chunk of C++ compiled to wasm, which may process images from other users.