How One Twitch Chat Message Became Code Execution on a Streamer’s PC – SCRT Team Blog
- A vulnerable chat overlay, an unsandboxed Chromium renderer, and a V8 bug already exploited in the wild were enough to turn viewer-controlled text into native code execution, with OBS itself left at its default settings.
- I found a Twitch chat overlay that rendered viewer messages as raw HTML inside an OBS Browser Source.
- That gives a viewer JavaScript execution inside OBS’s embedded Chromium browser.
Unverified
- A vulnerable chat overlay, an unsandboxed Chromium renderer, and a V8 bug already exploited in the wild were enough to turn viewer-controlled text into native code execution, with OBS itself left at its default settings.
- I found a Twitch chat overlay that rendered viewer messages as raw HTML inside an OBS Browser Source.
- That gives a viewer JavaScript execution inside OBS’s embedded Chromium browser.
Sources: Scrt