EIP-2026-103713
PRE-CVEWebKit JSC - 'arrayProtoFuncSplice' Uninitialized Memory Reference
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103713. PoCs published by Google Security Research.
AI-analyzed exploit summary This PoC exploits a use-after-free vulnerability in JavaScriptCore's `arrayProtoFuncSplice` function, where uninitialized values in the result array can lead to memory corruption if a garbage collection is triggered before initialization. The exploit uses a getter to force GC during array manipulation.
Description
WebKit JSC - 'arrayProtoFuncSplice' Uninitialized Memory Reference
Exploits (1)
This PoC exploits a use-after-free vulnerability in JavaScriptCore's `arrayProtoFuncSplice` function, where uninitialized values in the result array can lead to memory corruption if a garbage collection is triggered before initialization. The exploit uses a getter to force GC during array manipulation.