EIP-2026-103912
PRE-CVEGoogle Chrome 72.0.3626.121 / 74.0.3725.0 - 'NewFixedDoubleArray' Integer Overflow
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103912. PoCs published by Google Security Research.
AI-analyzed exploit summary This is a detailed technical analysis of a vulnerability in V8's array handling, specifically in the `NewFixedDoubleArray` function, where negative length values can bypass checks and cause integer overflows. The writeup explains the root cause and code paths in `Array.prototype.concat` and `Array.prototype.fill` that can trigger the issue.
Description
Google Chrome 72.0.3626.121 / 74.0.3725.0 - 'NewFixedDoubleArray' Integer Overflow
Exploits (1)
This is a detailed technical analysis of a vulnerability in V8's array handling, specifically in the `NewFixedDoubleArray` function, where negative length values can bypass checks and cause integer overflows. The writeup explains the root cause and code paths in `Array.prototype.concat` and `Array.prototype.fill` that can trigger the issue.