EDB-46939

functional

Spidermonkey - IonMonkey Leaks JS_OPTIMIZED_OUT Magic Value to Script

view exploit source exploit_dbverifiedtype dosauthor Google Security Researchpublished 2019-05-29catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-9792UScritical9.8Exploit
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then be used by JavaScript…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan