Out-of-bounds write in Google Chrome JavaScript

This repository contains a working exploit for CVE-2019-5825, a vulnerability in Google Chrome's V8 JavaScript engine (version 6.9.0, as shipped with Chrome 73.0.3683.86). The exploit targets the browser in --no-sandbox mode and achieves arbitrary read/write (AARW) in the V8 heap by corrupting array lengths and object pointers via a crafted Array.map call. The main exploit logic is implemented in 'exodus.js', which demonstrates the full chain from bug trigger to shellcode execution by abusing a WebAssembly instance to obtain a RWX memory page. The shellcode is injected and executed, resulting in remote code execution. Supporting files include 'exploit.js' and 'nextline.js', which are alternative or simplified exploit scripts for the same vulnerability, and 'exploit.sh', a Bash script to automate testing on both ia32 and x64 V8 d8 shells. The repository is operational and provides a full exploit chain, including payload delivery. No network endpoints or external services are targeted; the exploit is local to the browser or JavaScript engine process. The code is well-structured, with clear separation between helper functions, exploit primitives, and payload delivery.