3 ms·

That's a different bug (CVE-2024-0517 vs CVE-2024-0519)

• bri3d 3y ago
  I’m pretty sure the chain is all three bugs. 517, 518, 519.
  • Leszek 3y ago
    I'm pretty sure it isn't, the write up only uses 517 to get an arbitrary write primitive and then did a pretty standard chain into a sandbox escape via wasm (disclaimer - I work on V8).
    • deleted 3y ago
      [deleted]
    • bri3d 3y ago
      Hmm. I also thought the type confusion in 518 was the same one from the blog post, but looking at the patch, it's not either. I think I stand corrected overall.