[1-day Analysis] CVE-2023-2033 : A Type Confusion occurred in the Turbofan stage of the Google Chrome V8 engine (for English)
![[1-day Analysis] CVE-2023-2033 : A Type Confusion occurred in the Turbofan stage of the Google Chrome V8 engine (for English)](/assets/images/cve-2023-2033-post/crbug_view.png)
Hello, readers!
Introduction
I previously wrote a post about the structure of the Google Chrome V8 engine, in which I mentioned the 1-day vulnerability CVE-2023-2033 and I will write about it in the future. Therefore, I need to follow up on what I mentioned in my previous post.
That’s why I just wrote this post. that’s it…
Body
I read the issuses.chromium.org that related about this topic.
According to the description, if this vulnerability is exploited, the JavaScript “Hole” value can be leaked during JIT optimization in V8. Furthermore, I discovered this vulnerability occurred in the Turbofan stage through their conversation.
(writing…)
Conclusion
[ Reference ]
- https://issues.chromium.org/issues/40063989
SeungYong Lee
I'm Seungyong Lee. I joined the AppSuit team at Stealien, a cybersecurity company based in South Korea, on September 27, 2022, where I conducted Android security research. As of January 1, 2025, I became a member of the Red Team, working alongside talented hackers to embrace challenging missions, including APT simulations and 0-day/1-day vulnerability research and development.
This blog is a space where I share my hands-on experiences and explore the fascinating technologies I’ve encountered. Join me in navigating the ever-evolving world of cybersecurity and innovation.
Comments