Breaking the JIT: Exploiting a SpiderMonkey Type Confusion Bug

The article analyzes CVE-2025-14325, a SpiderMonkey Baseline JIT bug causing type confusion in inline caches. Incorrect assumptions about object shapes can lead…