CVE-2017-8636

This PoC exploits an integer overflow vulnerability in the Chakra JavaScript engine (CVE-2017-8636) by passing an excessively large number of arguments to the Array constructor, bypassing a flawed overflow check. The exploit triggers a denial-of-service condition due to incorrect handling of argument counts.

This is a technical writeup detailing a null pointer dereference and stack overflow vulnerability in ChakraCore's ByteCodeEmitter.cpp. It includes code snippets and a debugger output but lacks executable exploit code.

This is a writeup detailing a heap-based overflow vulnerability in ChakraCore's InterpreterStackFrame. The analysis includes code snippets and debugger output, explaining how the vulnerability can be triggered by manipulating the `varAllocCount` to exceed the `LocalsThreshold`.

This exploit demonstrates an integer overflow vulnerability in ChakraCore (CVE-2017-8636) where constructing a new object with 0xFFFF arguments causes an out-of-bounds write. The PoC targets Microsoft Edge's JavaScript engine, leading to potential remote code execution.