Rating:

**Official Writeup**

**tl;dr**

+ Arbitrary type confusion in DFG JIT
+ Bug eliminates a single CheckStructure node

Link to the writeup: https://blog.bi0s.in/2021/08/15/Pwn/InCTFi21-DeadlyFastGraph/

Author: [d4rk_kn1gh7](https://twitter.com/_d4rkkn1gh7)

Original writeup (https://blog.bi0s.in/2021/08/15/Pwn/InCTFi21-DeadlyFastGraph/).