Non notée
CVE-2021-24044 By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter…
Description
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error, with a low chance of RCE. This issue affects Hermes versions prior to v0.10.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Hermes 0.10 | premières → < 0.10.0 | 0.10.0 |
Autres CVE de Hermes
Les 20 CVE de Hermes →
CVE-2023-30470
A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior…
9.8
Critique
CVE-2023-28081
A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an…
9.8
Critique
CVE-2023-25933
A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a…
9.8
Critique
CVE-2023-24833
A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could…
7.5
Élevée