CVE-2024-8198 PoC — Google Chrome 安全漏洞

Description

  PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. 

介绍

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html

Steps to reproduce:
1. Apply the `chromium.diff` patch to chromium.
2. Run `genskpic.py` to generate `drawable_picture.skp.hh`, then move the generated file to `src/gpu/command_buffer/client`.
3. Build and start the browser.
4. Open `index.html` to trigger PoC.
5. GPU process will crash.

文件快照

备注