Exploitation Summary
CVE-2018-4386 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including Google Security Research, TJ Corley, a0zhar.
AI-analyzed exploit summary This PoC exploits a JavaScript engine vulnerability in WebKit (CVE-2018-4386) where hoisting a function overwrites the iteration variable in a for-in loop, leading to type confusion. The arbitrary object passed to op_get_direct_pname can cause memory corruption or RCE.
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
Exploits (3)
This PoC exploits a JavaScript engine vulnerability in WebKit (CVE-2018-4386) where hoisting a function overwrites the iteration variable in a for-in loop, leading to type confusion. The arbitrary object passed to op_get_direct_pname can cause memory corruption or RCE.
This exploit leverages CVE-2018-4386, a type confusion vulnerability in WebKit, to achieve arbitrary read/write primitives on PS4 firmware 6.XX. It sprays structures, triggers the bug, and sets up fake objects for memory manipulation.
This is a detailed writeup explaining the exploitation of CVE-2018-4386, a type confusion vulnerability in WebKit's JavaScriptCore engine affecting PS4 firmware 6.XX. It describes the logic flaw in variable hoisting within `for-in` loops and how it leads to arbitrary read/write primitives.
References (7)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H