Update: proof of concept on GitHub published. Google Chrome's V8 JavaScript engine is affected, and the flaw could allow a remote attacker to corrupt memory and potentially take control of the browser by tricking a user into opening a specially crafted web page.