Type Confusion in Google Chrome V8

This repository provides a proof-of-concept exploit for CVE-2025-13223, a critical type confusion vulnerability in the V8 JavaScript engine of Google Chrome (up to version 141.0.7390.76 on Windows). The exploit is designed to demonstrate heap corruption and arbitrary read/write in the Chrome renderer process by generating a malicious HTML file (payload.html) with JavaScript that manipulates TypedArray objects and prototype chains. The exploit is executed via a Windows executable (exploit.exe, included in a downloadable ZIP), which prepares the payload and guides the user to load it in a vulnerable Chrome instance. The repository includes a configuration file (config.json) to adjust exploit parameters such as heap spray size and prototype chain depth. The attack vector is browser-based, requiring the victim to visit a crafted page, and is remote-capable but requires user interaction. The repository is structured with a detailed README.md explaining usage, prerequisites, and mitigation, and a config.json for exploit tuning. No source code for the exploit executable or payload is included in the repository itself, but the documentation is comprehensive and outlines the exploit's operation and intended research use.