Month: February 2018

[dos] Microsoft Edge Chakra JIT – 'LdThis' Type Confusion

[dos] Microsoft Edge Chakra JIT – 'NewScObjectNoCtor' Array Type Confusion

[dos] Pdfium – Pattern Shading Integer Overflows

[dos] Microsoft Edge Chakra JIT – 'Array.prototype.reverse' Array Type Confusion

[dos] Pdfium – Out-of-Bounds Read with Shading Pattern Backed by Pattern Colorspace

[dos] Microsoft Edge Chakra JIT – ImplicitCallFlags Checks Bypass