6 min read
CVE-2021-30632: Chrome V8 Type Confusion -> RCE
Analysis of a type confusion vulnerability caused by a missing global-property Map stability check in V8's TurboFan JIT, plus a Windows RCE exploit
Read full articleTags
wasm
12 min read
CTF 2019 oob-v8: V8 Out-of-Bounds Read/Write Exploit
A step-by-step breakdown of a V8 OOB exploit: type confusion, addrOf/fakeObj primitives, and WASM RWX shellcode execution
Read full article