EIP-2026-103578

This exploit demonstrates a flaw in Spidermonkey's definite property analysis, where uninitialized memory is read due to incorrect handling of property access in catch blocks. It can lead to memory corruption or assertion failures in Firefox with unboxed objects enabled.