CVE-2019-0539

This is a working exploit PoC for CVE-2019-0539, a type confusion vulnerability in ChakraCore. The exploit leverages JavaScript type confusion to achieve arbitrary read/write primitives and constructs a ROP chain for potential code execution.

This PoC demonstrates a type confusion vulnerability in JavaScript engines by exploiting the side effects of NewScObjectNoCtor and InitProto opcodes, leading to memory corruption. It overwrites property slots with an arbitrary value (0x1234) to trigger the issue.

This PoC exploits a prototype pollution vulnerability in JavaScript engines by manipulating object prototypes through the InitClass instruction and SetIsPrototype method. It demonstrates arbitrary property manipulation, which can lead to type confusion or RCE in affected engines.

This exploit leverages a type confusion vulnerability in Chakra (CVE-2019-0539) to achieve arbitrary read access in memory. It manipulates object properties and ArrayBuffer handling to bypass security checks and leak memory addresses.