Skip to content
OpenAdvisories

Product · Facebook

Hermes

20 known vulnerabilities.

5 results · Clear filters · Feed

  • High 7.5

    A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could h…

  • High 7.5

    A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used …

  • High 7.5

    Out-of-bounds Read in Facebook Hermes

    An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this i…

  • High 8.1

    Signed to Unsigned Conversion Error in Facebook Hermes

    An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause a denial of service attack or a potential RCE via crafted JavaScript. Note that this is only exploi…

  • High 8.1

    Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes

    An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835377369c8fd5917d9b87acffa721ad2a168 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note …