{"id":"https://openalex.org/W7139927778","doi":"https://doi.org/10.48550/arxiv.2603.18789","title":"Weaver: Fuzzing JavaScript Engines at the JavaScript-WebAssembly Boundary","display_name":"Weaver: Fuzzing JavaScript Engines at the JavaScript-WebAssembly Boundary","publication_year":2026,"publication_date":"2026-03-19","ids":{"openalex":"https://openalex.org/W7139927778","doi":"https://doi.org/10.48550/arxiv.2603.18789"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.18789","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18789","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.18789","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130229073","display_name":"Lingming Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Lingming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130221010","display_name":"Binbin Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Binbin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037451675","display_name":"Puzhuo Liu","orcid":"https://orcid.org/0000-0002-8995-5924"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Puzhuo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130230108","display_name":"Qinge Xie","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xie, Qinge","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130230662","display_name":"Peng Di","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Di, Peng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Chen, Jianhai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Jianhai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130232560","display_name":"Shouling Ji","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ji, Shouling","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.5946000218391418,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.5946000218391418,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.2167000025510788,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.08079999685287476,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9146999716758728},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.6650999784469604},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5314000248908997},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5063999891281128},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.453000009059906},{"id":"https://openalex.org/keywords/boundary","display_name":"Boundary (topology)","score":0.4259999990463257},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.40630000829696655},{"id":"https://openalex.org/keywords/polyglot","display_name":"Polyglot","score":0.3709000051021576}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9146999716758728},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8076000213623047},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6729000210762024},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.6650999784469604},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5314000248908997},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5063999891281128},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.453000009059906},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.4259999990463257},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.40630000829696655},{"id":"https://openalex.org/C2780239667","wikidata":"https://www.wikidata.org/wiki/Q2102850","display_name":"Polyglot","level":2,"score":0.3709000051021576},{"id":"https://openalex.org/C68387754","wikidata":"https://www.wikidata.org/wiki/Q7271585","display_name":"Schedule","level":2,"score":0.34880000352859497},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.34779998660087585},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3425999879837036},{"id":"https://openalex.org/C2777062904","wikidata":"https://www.wikidata.org/wiki/Q545406","display_name":"Toolchain","level":3,"score":0.3327000141143799},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.32850000262260437},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.3057999908924103},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.30550000071525574},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.29820001125335693},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.29429998993873596},{"id":"https://openalex.org/C2777561058","wikidata":"https://www.wikidata.org/wiki/Q2652119","display_name":"Program comprehension","level":4,"score":0.2806999981403351},{"id":"https://openalex.org/C1009929","wikidata":"https://www.wikidata.org/wiki/Q179550","display_name":"Software bug","level":3,"score":0.25859999656677246},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2578999996185303},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2556999921798706},{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.18789","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18789","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.18789","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.18789","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.7646200060844421,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,23,168],"security":[1,82],"of":[2,26,56,84,154,192,196,210],"modern":[3],"JavaScript":[4],"(JS)":[5],"engines":[6,32],"is":[7,198],"critical":[8],"since":[9],"they":[10],"provide":[11],"the":[12,21,43,49,81,103,109,120,135,141,152,189,208],"primary":[13],"defense":[14],"mechanism":[15],"for":[16,123],"executing":[17],"untrusted":[18],"code":[19,156,175],"on":[20,69,164],"web.":[22],"recent":[24],"integration":[25],"WebAssembly":[27],"(Wasm)":[28],"has":[29,183],"transformed":[30],"these":[31,193],"into":[33],"complex":[34],"polyglot":[35],"environments,":[36],"creating":[37],"a":[38,114],"novel":[39],"attack":[40],"surface":[41],"at":[42,102],"JS-Wasm":[44,104],"interaction":[45],"boundary":[46,60],"due":[47],"to":[48,99,130,144,150,178,204],"distinct":[50],"type":[51],"systems":[52],"and":[53,72,148,161,202],"memory":[54],"models":[55],"two":[57,75,185],"languages.":[58],"This":[59,88,127],"remains":[61],"largely":[62],"underexplored,":[63],"as":[64,74],"previous":[65],"works":[66],"mainly":[67],"focus":[68],"testing":[70],"JS":[71,166],"Wasm":[73],"isolated":[76],"entities":[77],"rather":[78],"than":[79],"investigating":[80],"implications":[83],"their":[85],"cross-language":[86],"interactions.":[87],"paper":[89],"proposes":[90],"Weaver,":[91],"an":[92],"effective":[93],"greybox":[94],"fuzzing":[95],"framework":[96],"specifically":[97],"tailored":[98],"uncover":[100],"vulnerabilities":[101],"boundary.":[105,137],"To":[106],"comply":[107],"with":[108],"language":[110,136],"constraints,":[111],"Weaver":[112,139,163,172,182],"uses":[113],"type-aware":[115],"generation":[116],"strategy,":[117],"meticulously":[118],"maintaining":[119],"dual-type":[121],"representation":[122],"every":[124],"generated":[125],"variables.":[126],"allows":[128],"fuzzer":[129],"validly":[131],"utilize":[132],"variables":[133],"across":[134],"Besides,":[138],"leverages":[140],"UCB-1":[142],"algorithm":[143],"intelligently":[145],"schedule":[146],"mutators":[147],"generators":[149],"maximize":[151],"discovery":[153],"new":[155,186],"paths.":[157],"We":[158],"have":[159],"implemented":[160],"evaluated":[162],"three":[165],"engines.":[167],"results":[169],"indicate":[170],"that":[171],"achieves":[173],"superior":[174],"coverage":[176],"compared":[177],"state-of-the-art":[179],"fuzzers.":[180],"Moreover,":[181],"uncovered":[184],"bugs":[187],"in":[188],"latest":[190],"versions":[191],"engines,":[194],"one":[195],"which":[197],"considered":[199],"high":[200],"severity":[201],"set":[203],"highest":[205],"priority,":[206],"demonstrating":[207],"practicality":[209],"Weaver.":[211]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-21T00:00:00"}