Dota 2 Under Attack: How a V8 Bug Was Exploited in the Game

When we think about V8 exploits, the first things that come to mind are probably related to sophisticated browser zero-day exploit chains. While the browser may be the most interesting target for V8 exploits, we shouldn’t forget that this open-source JavaScript engine is also embedded into countless projects other than the browser. And where a JavaScript engine is used across a security boundary to execute potentially untrusted code, security issues may arise.

One such issue affected the massively popular Dota …

attack browser bug dota 2 embedded engine exploit exploited exploits game javascript malware analysis may projects security target things under untrusted zero-day zero-day exploit