header-logo
Suggest Exploit
vendor:
V8
by:
Chromium Security Team

V8 JavaScript Engine Out-of-Bounds Read Vulnerability

The V8 JavaScript engine is vulnerable to an out-of-bounds read vulnerability due to the bytecode generator emitting empty jump tables. If the jump table is empty, table_offset_ may exceed table_end_, resulting in out-of-bounds reads. A proof-of-concept exploit is provided which creates a function with an empty jump table and then calls it multiple times.

Mitigation:

Upgrade to V8 version 8.4.371.19 or later.
Source

Exploit-DB raw data: