Lucene search

K
osvGoogleOSV:GHSA-7MHC-PRGV-R3Q4
HistoryJan 16, 2022 - 12:00 a.m.

Access of Resource Using Incompatible Type in Hermes

2022-01-1600:00:45
Google
osv.dev
14

0.002 Low

EPSS

Percentile

58.3%

By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error, with a low chance of RCE. This issue affects Hermes versions prior to v0.10.0.

CPENameOperatorVersion
hermes-enginelt0.10.0

0.002 Low

EPSS

Percentile

58.3%

Related for OSV:GHSA-7MHC-PRGV-R3Q4