Chrome V8 Turbofan Type Confusion

Turbofan fails to deoptimize code after map deprecation, leading to a type confusion vulnerability.

Leave a Reply