CVE-2022-27810

creationtimestamp| type| source ---|---|--- 2022-10-07 00:16:44+00:00| seen| https://t.me/cibsecurity/50936...

CVE-2022-27810

It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode when asserts were enabled. This issue affects Hermes versions prior to v0.12.0...

CVE-2022-27810

CVE-2022-27810 affects the Hermes JavaScript engine prior to v0.12.0. The issue causes infinite recursion in the error handler when Hermes encounters certain malicious JavaScript, and is only triggerable in development mode (asserts enabled). Practical impact is a denial of service via a crash. A...