Posts
All the articles I have published.
-
N-Day Analysis CVE-2026-5865
Published date:V8 Maglev Phi-untagging bug where a missing Smi check lets a HeapNumber enter a Smi field store, leading to arbitrary read/write.
-
1-Day Analysis CVE-2026-3910
Published date:V8's Maglev compiler has an inappropriate implementation in CanWriteElideBarrier, leading to a User-after-free vulnerability.
-
N-Day Analysis CVE-2023-3079
Published date:A logic bug in V8's Inline Cache subsystem that leads to type confusion via incorrect element kind handling for JSArgumentsObject, enabling hole leak and arbitrary read/write.
-
[PWN COLLEGE] - V8 Exploitation Part 2
Published date:Continuing the V8 Exploitation journey — pwn.college Browser Exploitation levels 4–6: setLength OOB, offByOne abusing fast-properties, and functionMap type confusion.
-
[PWN COLLEGE] - V8 Exploitation Part 1
Published date:New journey into V8 Exploitation — pwn.college Browser Exploitation levels 1–3: environment setup, ArrayRun, GetAddressOf / ArbRead32 / ArbWrite32, GetFakeObject, and JIT spraying.
-
Heap Exploitation: Getting Started
Published date:You will see the world is so big when you learn heap.