Exploitation Summary
CVE-2021-30632 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 4 public exploits from researchers including Phuong39, CrackerCat, paulsery.
AI-analyzed exploit summary This repository provides a technical analysis of CVE-2021-30632, an out-of-bounds write vulnerability in V8. The exploit involves type confusion between PACKED_SMI and PACKED_DOUBLE elements in arrays, leading to arbitrary read/write operations.
Description
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Exploits (4)
This repository provides a technical analysis of CVE-2021-30632, an out-of-bounds write vulnerability in V8. The exploit involves type confusion between PACKED_SMI and PACKED_DOUBLE elements in arrays, leading to arbitrary read/write operations.
This repository references CVE-2021-30632, a Chrome V8 RCE vulnerability, and provides links to external analysis and PoC. It lacks direct exploit code but includes technical references and a demo GIF.
This repository contains a functional exploit PoC for CVE-2021-30632, a Chrome V8 engine vulnerability. The exploit leverages a type confusion bug to achieve arbitrary memory read/write and executes shellcode to spawn a shell.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H