| CVE-2023-30470 |
A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior…
|
9.8
Critical
|
May 18, 2023 |
| CVE-2023-28081 |
A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an…
|
9.8
Critical
|
May 18, 2023 |
| CVE-2023-25933 |
A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a…
|
9.8
Critical
|
May 18, 2023 |
| CVE-2023-24833 |
A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could…
|
7.5
High
|
May 18, 2023 |
| CVE-2023-24832 |
A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used…
|
7.5
High
|
May 18, 2023 |
| CVE-2023-23557 |
An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad…
|
9.8
Critical
|
May 18, 2023 |
| CVE-2023-23556 |
An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have…
|
9.8
Critical
|
May 18, 2023 |
| CVE-2022-40138 |
An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097,…
|
Not rated
|
Oct 11, 2022 |
| CVE-2022-35289 |
A write-what-where condition in hermes caused by an integer overflow, prior to commit…
|
Not rated
|
Oct 11, 2022 |
| CVE-2022-32234 |
An out of bounds write in hermes, while handling large arrays, prior to commit…
|
Not rated
|
Oct 11, 2022 |
| CVE-2022-27810 |
It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific…
|
Not rated
|
Oct 6, 2022 |
| CVE-2021-24044 |
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter…
|
Not rated
|
Jan 15, 2022 |
| CVE-2021-24045 |
A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior to…
|
Not rated
|
Dec 13, 2021 |
| CVE-2021-24037 |
A use after free in hermes, while emitting certain error messages, prior to commit…
|
Not rated
|
Jun 15, 2021 |
| CVE-2020-1896 |
A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit…
|
Not rated
|
Feb 2, 2021 |
| CVE-2020-1915 |
An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit…
|
Not rated
|
Oct 26, 2020 |
| CVE-2020-1914 |
A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit…
|
Not rated
|
Oct 8, 2020 |
| CVE-2020-1913 |
An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit…
|
Not rated
|
Sep 9, 2020 |
| CVE-2020-1912 |
An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes…
|
Not rated
|
Sep 9, 2020 |
| CVE-2020-1911 |
A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains…
|
Not rated
|
Sep 4, 2020 |