4 ms·
Honestly IMO it's more an enabler for CVEs - it provides a mechanism for attackers to get arbitrary code exec if they can circumvent the protections on modifica
by olliej 3y ago
Honestly IMO it's more an enabler for CVEs - it provides a mechanism for attackers to get arbitrary code exec if they can circumvent the protections on modifications to the JIT region - the bugs that are the root of the exploit seem to mostly be GC issues (which makes sense as GC issues give you various analogies to OoB, type confusion, UaF, etc that are the basic units of exploits).