Hacker News new | ask | show | jobs
by submagr 1895 days ago
Can someone please explain how this hack works? (I am CS major so I know basic stuff but not a hacker)
1 comments

It uses WebAssembly VM bug to get arbitrary memory address write/read capability within Chromium sandbox.
The actual bug is much before this though, WASM is just used to get a RWX page of memory, as v8 won't give JS that the other side of the JIT process.