Tags: jit chrome browser javascript v8
Rating: 5.0
Exploiting bad jit optimizations to get OOB read/write in chromium V8
https://gist.github.com/itsZN/9ae6417129c6658130a898cdaba8d76c
Good explanation, I have no idea how you found this but bravo!!