EIP-2026-103435

This PoC exploits a type confusion vulnerability in JavaScript engines by manipulating the environment context during optimization, leading to a crash or potential arbitrary code execution. The issue arises from incorrect handling of the LdaNamedProperty operation and environment merging in the graph builder.