Chrome V8 JIT NodeProperties::InferReceiverMaps Type Confusion

Chrome V8 JIT suffers from a NodeProperties::InferReceiverMaps type confusion vulnerability.

Leave a Reply