CVE-2017-2446

This exploit leverages a WebKit JavaScript engine flaw where strict mode enforcement inconsistently allows Function.caller access, enabling direct calls to sensitive native functions like arrayProtoPrivateFuncAppendMemcpy. The PoC demonstrates arbitrary memory manipulation via crafted array operations.

This exploit demonstrates a type confusion vulnerability in JavaScript's Intl.DateTimeFormat.format function, allowing arbitrary memory access via a bound function manipulation. The PoC triggers the vulnerability by overriding valueOf and using Function.caller to obtain an unbound function, which is then called with an arbitrary address.