cve/2015/CVE-2015-6764.md

CVE-2015-6764

Description

The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/allpaca/chrome-sbx-db
• https://github.com/lnick2023/nicenice
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/secmob/cansecwest2016
• https://github.com/tunz/js-vuln-db
• https://github.com/xbl3/awesome-cve-poc_qazbnm456