3 ms·
JS JIT is source of a lot of serious CVEs
by high_na_euv 3y ago
JS JIT is source of a lot of serious CVEs
- olliej 3y agoHonestly IMO it's more an enabler for CVEs - it provides a mechanism for attackers to get arbitrary code exec if they can circumvent the protections on modifications to the JIT region - the bugs that are the root of the exploit seem to mostly be GC issues (which makes sense as GC issues give you various analogies to OoB, type confusion, UaF, etc that are the basic units of exploits).