AdvancedRuntime Security
Memory Safety Vulnerabilities in Node.js Native Addons
Harsh Kumar
Abstract
Node.js native addons written in C/C++ introduce memory safety risks at the boundary between JavaScript and native code. This research identifies patterns of unsafe native addon development, demonstrates practical heap corruption attacks, and proposes safer development practices and static analysis approaches for addon authors.
The full research paper is currently being finalized for publication. The complete findings, methodology, proof-of-concept code, and remediation guidance will be available here upon release.
To be notified of the release or to request an advance copy, please contact us.
Tags:Node.jsMemory SafetyNative AddonsHeap Corruption