KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #deepseek-harness #typescript #ai-agent #codex #developer-tools #claude-code #windows #mcp #python #desktop-app

CVE-2025-6554

★ 31 Open GitHub ↗

No description available.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# CVE-2025-6554

This repository contains

- This repository constructed and proved the `addressof` and `fakeobj` primitives, as well as the arbitrary address read/write primitives in V8 sandbox.

## Reproduce Information

- Commit: 609a85c2a1bd77d6f6905369f4bc4fcf34c5db09

- Command Line: out\x64.release\d8 --allow-natives-syntax

## Acknowledgement

- Shoutout to [@DarkNavyOrg](https://x.com/DarkNavyOrg/status/1939948997432447388) for finding the poc.
- Shoutout to [qianxin](https://zhuanlan.zhihu.com/p/1933101353829381194) for writing a detailed analysis about this bug.
- Shoutout to [mistymntncop](https://github.com/mistymntncop/CVE-2025-6554/blob/main/exploit.js) for finding the exploit method.
- Shoutout to [@bjrjk](https://x.com/bjrjk) for helping.

## References

1. https://zhuanlan.zhihu.com/p/1933101353829381194
2. https://chromium.googlesource.com/v8/v8.git/+/22e9d9621de58ec6fe6581b56215059a48451b9f%5E%21/#F0
3. https://github.com/mistymntncop/CVE-2025-6554/blob/main/exploit.js

## Disclaimer

This repository is intended solely for educational purposes and must not be used for any malicious activities.

CVE-2025-6554

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README