Skip to content
OpenAdvisories

Package · npm

hermes-engine

7 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.5

    Out-of-bounds Read in Facebook Hermes

    An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this i…

  • High 8.1

    Signed to Unsigned Conversion Error in Facebook Hermes

    An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause a denial of service attack or a potential RCE via crafted JavaScript. Note that this is only exploi…

  • High 8.1

    Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes

    An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835377369c8fd5917d9b87acffa721ad2a168 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note …