Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37523
HistoryOct 12, 2022 - 3:55 a.m.

Arbitrary Code Execution

2022-10-1203:55:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
hermes-engine
vulnerability
integer conversion
out-of-bounds operations
application crash

EPSS

0.003

Percentile

69.9%

hermes-engine is vulnerable to arbitrary code execution. The vulnerability exists due to the integer conversion error in the library, which performs out-of-bounds operations and subsequently executes arbitrary code execution, resulting in an application crash.

EPSS

0.003

Percentile

69.9%

Related for VERACODE:37523