HE
Product
Hermes
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 6Medium 0Low 0
Watch
Add Hermes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30470 | 9.8 | May 18 | A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior to commit da8990f737ebb9d9810633502f65ed462b819c09 could… Affected: All versions, or not specified |
| CVE-2023-28081 | 9.8 | May 18 | A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and obtain arbitrary code execution via a… Affected: All versions, or not specified |
| CVE-2023-25933 | 9.8 | May 18 | A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to execute arbitrary code via untrusted… Affected: All versions, or not specified |
| CVE-2023-23557 | 9.8 | May 18 | An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a malicious attacker to execute arbitrary… Affected: before 2023-01-10 |
| CVE-2023-23556 | 9.8 | May 18 | An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code… Affected: before 2023-02-02 |
| CVE-2022-32234 | 9.8 | Oct 11 | An out of bounds write in hermes, while handling large arrays, prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1 allows attackers to potentially execute arbitrary code via… Affected: before prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1 |
| CVE-2022-35289 | 9.8 | Oct 11 | A write-what-where condition in hermes caused by an integer overflow, prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 allows attackers to potentially execute arbitrary… Affected: before prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 |
| CVE-2022-40138 | 9.8 | Oct 11 | An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and… Affected: before commit prior to 6aa825e480d48127b480b08d13adf70033237097 |
| CVE-2021-24044 | 9.8 | Jan 15 | By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error… Affected: before 0.10.0 |
| CVE-2021-24045 | 9.8 | Dec 13 | A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to v0.10.0 Affected: before 0.10.0 |
| CVE-2021-24037 | 9.8 | Jun 15 | A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code… Affected: before 0.8.0 |
| CVE-2020-1896 | 9.8 | Feb 2 | A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2… Affected: before 0.5.0 |
| CVE-2020-1914 | 9.8 | Oct 8 | A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially… Affected: before 2020-10-01 |
| CVE-2020-1911 | 9.8 | Sep 4 | A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit… Affected: before 0.4.3 |
| CVE-2020-1913 | 8.1 | Sep 9 | An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause a denial of service… Affected: through 0.4.3 |
| CVE-2020-1912 | 8.1 | Sep 9 | An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835377369c8fd5917d9b87acffa721ad2a168… Affected: through 0.4.3 |
| CVE-2023-24833 | 7.5 | May 18 | A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by an attacker to leak raw data from Hermes… Affected: before 2023-02-02 |
| CVE-2023-24832 | 7.5 | May 18 | A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtime where the… Affected: before 2023-01-31 |
| CVE-2022-27810 | 7.5 | Oct 6 | It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript Affected: before 0.12.0 |
| CVE-2020-1915 | 7.5 | Oct 26 | An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service… Affected: before 2020-09-25 |
Showing 20