CVE-2024-8198 PoC — Google Chrome 安全漏洞

Source

Associated Vulnerability

Description

  PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. 

Readme

Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_28.html

Steps to reproduce:
1. Apply the `chromium.diff` patch to chromium.
2. Run `genskpic.py` to generate `drawable_picture.skp.hh`, then move the generated file to `src/gpu/command_buffer/client`.
3. Build and start the browser.
4. Open `index.html` to trigger PoC.
5. GPU process will crash.

File Snapshot

 [4.0K]  /data/pocs/7a393d2132214ea7c38dc4b347334e27eba86e36
├── [6.7K]  chromium.diff
├── [3.5K]  genskpic.py
├── [ 191]  index.html
└── [ 400]  README.md

0 directories, 4 files

Remarks