Lucene search
GoogleOSV:GHSA-MPH8-6787-R8HWHistoryMay 24, 2022 - 7:05 p.m.
Use After Free in Hermes
2022-05-2419:05:34
Google
osv.dev
5
0.004 Low
EPSS
Percentile
72.2%
A use after free in hermes, while emitting certain error messages, prior to commit d86e185e485b6330216dee8e854455c694e3a36e allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hermes-engine | lt | 0.8.0 |
Related
cve
cve
CVE-2021-24037
2021-06-15 22:15:08
github
github
Use After Free in Hermes
2022-05-24 19:05:34
prion
prion
Design/Logic Flaw
2021-06-15 22:15:00
osv
osv
CVE-2021-24037
2021-06-15 22:15:08
cvelist
cvelist
CVE-2021-24037
2021-06-15 22:00:11
nvd
nvd
CVE-2021-24037
2021-06-15 22:15:08