EIP-2026-115649

This PoC exploits a type confusion vulnerability in JavaScript engines by manipulating array operations through the `Array.prototype.push` method, bypassing a previous patch. It triggers type confusion by pushing a specific value and then overwriting an array element with a carefully chosen floating-point number.