Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Facebook Hermes a6dcafe6ded8e61658b40f5699878cd19a481f80 Clear all filters
TI-2023-10333 CVE-2023-24833 · GHSA-c3mx-jjr9-q7cc

Use after free in Meta Hermes

Priority MEDIUM 40

A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by an attacker to leak raw data from Hermes VM’s heap.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00644 Published 2023-05-18 Fixed CWE-416
TI-2023-09387 CVE-2023-23556 · GHSA-5wwx-r37w-hqhw

Out-of-bounds write in Meta Hermes

Priority MEDIUM 51

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2023-05-18 Fixed CWE-787