vendor:
Chrome
by:
Bogdan Kurinnoy
7.5
CVSS
HIGH
Out-of-memory in invalid array length
119
CWE
Product Name: Chrome
Affected Version From: Google Chrome 71.0.3578.98
Affected Version To: Google Chrome 71.0.3578.98
Patch Exists: NO
Related CWE: N/A
CPE: a:google:chrome
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows x64
2019
Google Chrome 71.0.3578.98 V8 JavaScript Engine – Out-of-memory in invalid array length. Denial of Service (PoC)
Fatal javascript OOM in invalid array length. A proof-of-concept exploit is provided which creates an array with a length of 0x20000000, which causes a fatal out-of-memory error in the V8 JavaScript engine.
Mitigation:
The vulnerability can be mitigated by ensuring that the length of an array is valid before it is used.
