Home / os / win95

JSC Argument Object Reconstruction Type Confusion

Posted on 05 November 2019

JSC suffers from a type confusion vulnerability during bailout when reconstructing arguments objects.

 

TOP