How mistymntncop/cve-2024-7971 works
This repository is a proof of concept for CVE-2024-7971, not a standalone exploit or service. The main workflow is to run the modified PoC under V8’s d8 shell: it loads the Wasm builder, constructs and instantiates a module, then calls its exported function to exercise the vulnerable loop-branch parameter handling and invoke an imported JavaScript callback. poc-original.js preserves a related regression-test variant. The README is brief; the modified PoC’s callback and final output details are only partially sampled.
Main entry points: poc.js Modified PoC · wasm-module-builder.js Wasm builder · poc-original.js Original PoC
Components 8
PoC execution
- Modified PoC
poc.js - Imported JS callback
poc.js
Wasm construction
- Wasm builder
wasm-module-builder.js - Generated Wasm module
poc.js
Reference variant
- Original PoC
poc-original.js - WAT artifact
poc.wat
Other components
- PoC runner
- V8 d8 shell
Connections 8
- PoC runner → V8 d8 shell: runs PoC
- V8 d8 shell → Modified PoC: executes
- Modified PoC → Wasm builder: loads builder
- Modified PoC → Wasm builder: instantiates via
- Wasm builder → Generated Wasm module: serializes module
- Modified PoC → Generated Wasm module: calls export
- Generated Wasm module → Imported JS callback: calls import
- PoC runner → Original PoC: can run