Authored by Ivan Fratric, Google Security Research

JavaScriptCore suffers from a crash condition due to an uninitialized register in slow_path_profile_catch. Proof of concept that affects Safari is included.

advisories | CVE-2021-30797

RELATED ARTICLESMORE FROM AUTHOR