[KongchangAI]
ConceptCFI / Control Flow Integrity

Control-Flow Integrity

A vulnerability exploit mitigation mechanism that validates the legitimacy of indirect jumps and return targets at compile time and runtime to prevent attackers from hijacking program control flow. Chrome enables a Clang CFI variant in its renderer, inserting type checks at indirect call sites.

Timeline (last 90 days)

Oct 13

Mitigations Chrome continuously deploys include site isolation, pointer compression, control flow integrity, and regular bug bounty programs.

Unverified50%

All Facts (1)

Source Articles