Exploit/Advisories

Published on October 5th, 2023 📆 | 2555 Views ⚑

0

Chrome ReduceJSLoadPropertyWithEnumeratedKey Out-Of-Bounds Access

iSpeech

Chrome checks in ReduceJSLoadPropertyWithEnumeratedKey are not sufficient to prevent the engine from reading an out-of-bounds index from an enum cache.

Source link

Tagged with: access • bounds • chrome • OutofBounds • reducejsloadpropertywithenumeratedkey