CVE-2022-35289

🗓️ 11 Oct 2022 00:00:00Reported by facebookType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 50 Views

A write-what-where condition in hermes caused by an integer overflow allows arbitrary code execution via crafted JavaScript

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-35289	11 Oct 202202:15	–	attackerkb
Circl	CVE-2022-35289	11 Oct 202207:25	–	circl
CNNVD	Facebook Hermes 输入验证错误漏洞	11 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-35289	11 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-38179	3 Oct 202520:07	–	euvd
NVD	CVE-2022-35289	11 Oct 202202:15	–	nvd
OSV	CVE-2022-35289	11 Oct 202202:15	–	osv
Prion	Integer overflow	11 Oct 202202:15	–	prion
RedhatCVE	CVE-2022-35289	9 Jan 202610:40	–	redhatcve
Veracode	Arbitrary Code Execution	11 Oct 202216:25	–	veracode

NVD

Node

facebook hermesRange<0.12.0

[
  {
    "vendor": "Facebook",
    "product": "Hermes",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "prior to commit 5b6255ae049fa4641791e47fad994e8e8c4da374",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]