Collected research

Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript

[1507.06955] Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript

Daniel Gruss, Clémentine Maurice and Stefan Mangard · arXiv.org

Rowhammer.js triggers DRAM bit flips from ordinary JavaScript in a browser, replacing the usual cache flush instruction with eviction sets built from an inferred memory mapping. A page the victim merely visits can corrupt memory it never accesses and take control of the machine, and existing Rowhammer countermeasures do not stop it.

Record

Document

[1507.06955] Rowhammer.js: A Remote Software-Induced Fault Attack in JavaScript

Researcher

Daniel Gruss, Clémentine Maurice and Stefan Mangard

Published by

arXiv.org

Topic

Server

In the archive

• Collected in the 2015 research round

Tags

• side-channel
• privilege-escalation
• rce
• javascript-runtime
• javascript
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Daniel Gruss, Clémentine Maurice and Stefan Mangard, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.