News for hackers. Stuff that matters.

A comment on Chrome zero-day released on GitHub – fixed on V8 but still works on latest. Parent comment

Re:Chrome zero-day released on GitHub – fixed on V8 but stil... by coolspot on Monday April 12, 2021 @10:34PM (#26787562)
It uses WebAssembly VM bug to get arbitrary memory address write/read capability within Chromium sandbox.
[ Parent | on HN ]
Re:Chrome zero-day released on GitHub – fixed on V8 but stil... by heljara on Tuesday April 13, 2021 @03:52AM (#26789334)
The actual bug is much before this though, WASM is just used to get a RWX page of memory, as v8 won't give JS that the other side of the JIT process.
[ Parent | on HN ]