@2600hz/sds-react-native-components (>=0.1.0, <=1.8.1), @aashray-motwani/react-native-cocentric-progress-circle (1.0.0) +1534 more potentially affected by CVE-2020-1912 via hermes-engine (>=0.0.0, <=0.5.1)

hermes-engine NPM version =0.0.0, =0.1.0, =1.0.1, =0.0.1, =0.0.1, =0.1.0, =1.0.4, =2.5.0, =1.3.0, =0.0.1, =0.1.0, =0.12.0, =0.3.0, =0.3.1 - @apparatus/blocks-utils-view 0.1.0 and more Source cves: CVE-2020-1912 Source advisory: OSV:GHSA-PF27-929J-9PMM...

CVE-2020-1912

CVE-2020-1912 affects Facebook Hermes, a JavaScript VM used in React Native. The vulnerability is an out-of-bounds read/write when executing lazily compiled inner generator functions, prior to commit 091835377369c8fd5917d9b87acffa721ad2a168. Exploitation requires the application to evaluate untru...