TLDR Tech / Dev
Exploiting V8: A Developer's Journey into Chrome Vulnerabilities
A developer successfully exploited three public V8 bugs in a Chrome build from Google's v8CTF. The exploit involved leaking a compressed object address, creating a fake JavaScript array for read/write access, and using a JSPI/JS Dispatch Table mismatch to escape the V8 cage, ultimately printing the flag.
Read the full story