Vendor
154 known vulnerabilities.
Products
154 results · Feed
-
Unscored —
An out of bounds write in hermes, while handling large arrays, prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1…
-
Unscored —
An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, co…
-
Unscored —
It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific malicious…
-
Critical 9.8
Access of Resource Using Incompatible Type in Hermes
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a…
-
Critical 9.8
The calling logic for WhatsApp for Android prior to v2.21.23, WhatsApp Business for Android prior to v2.21.23, WhatsApp…
-
Unscored —
A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in Facebook Hermes prior t…
-
Unscored —
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Androi…
-
Unscored —
HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handle…
-
High 8.4
Deserialization of Untrusted Data in parlai
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.
-
Unscored —
Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle…
-
Unscored —
Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds wr…
-
Critical 9.8
Use After Free in Hermes
A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application us…
-
Unscored —
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business fo…
-
High 7.5
Regular expression denial of service in react-native
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
-
Unscored —
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code …
-
Unscored —CVE-2021-24027 Public exploit
A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may h…
-
Unscored —
A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, …
-
Unscored —
A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a c…
-
Unscored —
When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property ar…
-
Unscored —
The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This…
-
Unscored —
The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously construct…
-
Unscored —
The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the ex…
-
Unscored —
In the crypt function, we attempt to null terminate a buffer using the size of the input salt without validating that t…
-
Unscored —
Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function c…
-
Unscored —
Incorrect bounds calculations in substr_compare could lead to an out-of-bounds read when the second string argument pas…
-
Unscored —
In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the …
-
Unscored —
xbuf_format_converter, used as part of exif_read_data, was appending a terminating null character to the generated stri…
-
Unscored —
An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resul…
-
Medium 5.6
react-dev-utils OS Command Injection in function `getProcessForPort`
react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. O…
-
Unscored —
Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utilit…
-
Unscored —
In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file…
-
Unscored —
A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c…
-
Unscored —
A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.…
-
Unscored —
Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could ha…
-
High 7.5
Out-of-bounds Read in Facebook Hermes
An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this i…
-
Critical 9.8
Always-Incorrect Control Flow Implementation in Facebook Hermes
A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript…
-
Unscored —
A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, Wh…
-
Unscored —
A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could …
-
Unscored —
A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could hav…
-
Unscored —
Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for…