Arbitrary Code Execution

hermes-engine is vulnerable to Arbitrary Code Execution. A remote attacker is able to inject and execute malicious code on the server when the library permits the execution of untrusted JavaScript via an out-of-bound write.