OSV-2020-893 Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23725 Crash type: Heap-buffer-overflow READ 1 Crash state: hermes::parser::JSLexer::consumeBracedCodePoint hermes::parser::JSLexer::consumeUnicodeEscape hermes::parser::JSLexer::advance...

PT-2020-22617

Name of the Vulnerable Software and Affected Versions Hermes affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the hermes::parser::JSLexer component, specifically in the consumeBracedCodePoint, consumeUnicodeEscape, and advance...

WS-2020-0395

Hermes in versions 0.4.1 to 0.5.3 is vulnerable to Heap-buffer-overflow in hermes::parser::JSLexer::consumeBracedCodePoint, related to lib/Parser/JSLexer.cpp...