Facebook / Hermes
20 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2023-30470 | A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior to commit da8990f737ebb9d9810633502f65… | CRITICAL | 9.8 | May 18, 2023 |
| CVE-2023-28081 | A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free and obtain arbitrary co… | CRITICAL | 9.8 | May 18, 2023 |
| CVE-2023-25933 | A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker to execute arbitrary c… | CRITICAL | 9.8 | May 18, 2023 |
| CVE-2023-24833 | A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by an attacker to leak raw… | HIGH | 7.5 | May 18, 2023 |
| CVE-2023-24832 | A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used by an attacker to crash an Hermes runtim… | HIGH | 7.5 | May 18, 2023 |
| CVE-2023-23557 | An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a malicious attacker to… | CRITICAL | 9.8 | May 18, 2023 |
| CVE-2023-23556 | An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to exec… | CRITICAL | 9.8 | May 18, 2023 |
| CVE-2022-40138 | An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bou… | CRITICAL | 9.8 | Oct 11, 2022 |
| CVE-2022-35289 | A write-what-where condition in hermes caused by an integer overflow, prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374 allows attackers to potentially… | CRITICAL | 9.8 | Oct 11, 2022 |
| CVE-2022-32234 | An out of bounds write in hermes, while handling large arrays, prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1 allows attackers to potentially execute… | CRITICAL | 9.8 | Oct 11, 2022 |
| CVE-2022-27810 | It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was… | HIGH | 7.5 | Oct 6, 2022 |
| CVE-2021-24044 | By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator fu… | CRITICAL | 9.8 | Jan 15, 2022 |
| CVE-2021-24045 | A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to v0.10.0. Note that this is only exploi… | CRITICAL | 9.8 | Dec 13, 2021 |
| CVE-2021-24037 | A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially exe… | CRITICAL | 9.8 | Jun 15, 2021 |
| CVE-2020-1896 | A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2 (https://github.com/facebook/hermes/… | CRITICAL | 9.8 | Feb 2, 2021 |
| CVE-2020-1915 | An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a den… | HIGH | 7.5 | Oct 26, 2020 |
| CVE-2020-1914 | A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attack… | CRITICAL | 9.8 | Oct 8, 2020 |
| CVE-2020-1913 | An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause… | HIGH | 8.1 | Sep 9, 2020 |
| CVE-2020-1912 | An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835377369c8fd5917d9b87… | HIGH | 8.1 | Sep 9, 2020 |
| CVE-2020-1911 | A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit fe528… | CRITICAL | 9.8 | Sep 4, 2020 |
Showing 1 to 20 of 20 CVEs