Arbitrary Code Execution

hermes-engine is vulnerable to arbitrary code execution. The vulnerability is due to the SmallVectorBase::growpod functions handling of large arrays which allows an attacker to potentially execute arbitrary code via malicious JavaScript...