V8 Heap Archaeology: Finding Exploitation Artifacts in Chrome's Memory

This post analyzes the anatomy of V8 JavaScript engine memory-corruption exploits—covering primitives such as out-of-bounds read/write, addrof, fakeobj, and caged/arbitrary read/write—explains the V8 internals attackers abuse, and describes forensic artifacts those primitives leave in renderer crash dumps; it also introduces v8-forensics, a tool to detect these invariant violations across Chrome versions without symbols.