CVE-2019-5825

This Metasploit module exploits a memory corruption vulnerability in Chrome 72/73 via Array.map to achieve arbitrary read/write, then uses WebAssembly for RWX memory allocation and payload execution. It requires the browser to run with --no-sandbox for full impact.

This repository contains a functional exploit for CVE-2019-5825, targeting a vulnerability in Chrome 73.0.3683.86 (V8 6.9.0). The exploit leverages a type confusion bug to achieve arbitrary read/write (AARW) and executes shellcode via WebAssembly for remote code execution (RCE).

This Metasploit module exploits a memory corruption vulnerability in Google Chrome 72/73 (CVE-2019-5825) by corrupting the length of a float array to achieve arbitrary read/write, then uses WebAssembly to execute shellcode in RWX memory. The exploit requires the browser to be run with --no-sandbox for full impact.