Weaver: Fuzzing JavaScript Engines at the JavaScript-WebAssembly Boundary (opens in new tab)

arXiv:2603.18789v1 Announce Type: new Abstract: The security of modern JavaScript (JS) engines is critical since they provide the primary defense mechanism for executing untrusted code on the web. The recent integration of WebAssembly (Wasm) has transformed these engines into complex polyglot environments, creating a novel attack surface at the JS-Wasm interaction boundary due to the distinct type systems and memory models of two languages. This boundary remains largely underexplored, as pre...