Listen to this Post
How the mentioned CVE works
This CVE-2024-2122 is a type confusion vulnerability within the V8 JavaScript engine. V8 uses an advanced system of hidden classes and optimized compilation to speed up JavaScript execution. During JIT compilation, V8 makes assumptions about object types to generate highly efficient machine code. A maliciously crafted HTML page can present an object that V8 initially interprets as one type (e.g., a standard object) but is later used as a different, incompatible type (e.g., an array with different elements). This confuses the engine, causing it to generate incorrect code that accesses memory out of the object’s bounds. This invalid memory access leads to heap corruption, allowing an attacker to overwrite sensitive data structures in memory, potentially leading to arbitrary code execution.
Platform: Google Chrome
Version: < 142.0.7444.175
Vulnerability: Type Confusion
Severity: High
date: 2024-05-14
Prediction: Patch expected 2024-05-16
What Undercode Say:
`git log –oneline –grep=”2122″`
`v8/src/compiler/type-hints.cc`
`diff –git a/src/compiler/type-hints.cc b/src/compiler/type-hints.cc`
`+ CHECK(!IsHeapObject(obj));`
How Exploit:
Crafted HTML page
Triggering type confusion
Heap corruption
ROP chain execution
Protection from this CVE
Update Chrome immediately
Disable JavaScript
Use exploit mitigations
Impact:
Arbitrary Code Execution
Heap Corruption
Remote Compromise
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: www.cve.org
Extra Source Hub:
Undercode
