How This JavaScript Code Exploits your Browser (CVE-2023-38600)
Hey guys - been a while.
I'm back with a new video today where we take a look at CVE-2023-38600 - a memory corruption bug within JavaScriptCore on macOS and iOS.
The bug is caused by an integer underflow, which leads to a memmove call with a large size value. In terms of WebKit vulnerabilities, this one has a nice and simple trigger which makes it a good starting point for beginners interested in WebKit exploitation and browser exploitation.
https://www.zerodayinitiative.com/blo...
zygosec.com
@bellis1000