Exploitation Summary
EIP tracks 1 public exploit for CVE-2024-1939. PoCs published by rycbar77.
AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2024-1939, leveraging a type confusion vulnerability in V8's WebAssembly-to-JavaScript conversion due to unsupported kWasmS128 operations. The exploit achieves arbitrary read/write primitives and includes a sandbox bypass via Regexp manipulation, ultimately executing an ORW chain to write the flag through stderr.
Description
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Exploits (1)
This repository contains a functional exploit PoC for CVE-2024-1939, leveraging a type confusion vulnerability in V8's WebAssembly-to-JavaScript conversion due to unsupported kWasmS128 operations. The exploit achieves arbitrary read/write primitives and includes a sandbox bypass via Regexp manipulation, ultimately executing an ORW chain to write the flag through stderr.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H