Seunghyun Lee, a first-year Ph.D. student in Carnegie Mellon University’s Computer Science Department , was recently conducting some routine research on Google Chrome’s source code. Through his fuzzing research, Lee discovered a faulty implementation in Google Chrome's WebAssembly type system. Subtle design issues in the WebAssembly code, including optimizing compilers, facilitated a series of bugs that led to fragile sites that could easily be exploited.
↧
