Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-29943 — A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE | Kitploit
Tools/GitHubGitHub/bjrjk/cve-2024-29943
Vulnerability AnalysisExploitationPapers & ResearchLearning & EducationBinary Exploitation
GitHubbjrjk/cve-2024-29943

CVE-2024-29943

A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE

View Repository
97141 year agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-29943

A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE.

This repository contains PoC, Exploit and Analysis Slides for CVE-2024-29943.

Demo

Demo.mp4

Slides

Slides.pdf

Reproduce Information

  • Github Git Commit: afbdf6822c9e9f9b6d44b9ea6904cb10878126b1
  • Operating System: Ubuntu 22.04
  • Architecture: amd64
  • Command Line Arguments: ./js --ion-offthread-compile=off --spectre-mitigations=off PoC.js
  • Patch for JitSpew Debug: JitSpew.patch

Acknowledgement

  • Shoutout to Manfred Paul for finding the bug.
  • Shoutout to @maxpl0it for giving the integer range inconsistent PoC.

References

  1. https://hg.mozilla.org/mozilla-central/rev/45d29e78c0d8f9501e198a512610a519e0605458
  2. https://github.com/mozilla/gecko-dev/commit/81806e7ccec7dde41e37c9891592a6e39ce46380
  3. https://doar-e.github.io/blog/2018/11/19/introduction-to-spidermonkey-exploitation/
  4. https://starlabs.sg/blog/2020/04-tianfu-cup-2019-adobe-reader-exploitation/

Disclaimer

This repository is intended solely for educational purposes and must not be used for any malicious activities.

Download Tool