International Problems: Serialized Fuzzing for ICU Vulnerabilities
summary
ICU libraries contain multiple exploitable bugs discovered by applying serialized fuzzing to JavaScript ICU bindings, feeding crafted locale/time/number constructor objects through V8 to reach C++ code. A long‑standing Persian calendar integer overflow from 2012 yields out‑of‑bounds indexing and memory corruption; other findings include a buffer counter overflow and a language‑tag conversion overflow. The team builds working POCs: three exploitable chains that run in Chrome and one that also affects Chrome Safari Firefox, impacting any product shipping recent ICU builds.
AI-written summary · about
chapters (6)
- 0:00Introduction to ICU
- 2:20ICU in software products
- 6:47JavaScript integration
- 12:42Security filter mechanisms
- 17:18Bypassing security filters
- 28:01Vulnerability case studies
related talks
01h 16mClassic Vulnerabilities
47mExploring the New World : Remote Exploitation of SQLite and Curl
37mReviving JIT Vulnerabilities: Unleashing the Power of Maglev Compiler Bugs on Chrome Browser
01h 05mClassic Vulnerabilities
51mHey Man, Have You Forgotten To Intialize Your Memory?
59mBrowsers Gone Wild
29mEvent-based Fuzzing, Patch-based Research, and Comment Police: Finding Bugs Through a Bug
59mBeyond Sanitizers...