From the Hacker News thread
The actual bug is in the Turbofan JIT, not WASM. Using WASM is the method de'jour for turning arbitrary read/write/object leak into RCE. Without WASM, the writer would have to use ROP/etc, but the primitives are still there. Check out this discussion by a bunch of the big names in the field, including Niklas B who was on the team that originally found this bug: twitter.com/spoofyroot/status/137991178…