Lucene search
Veracode Vulnerability DatabaseVERACODE:40665HistoryMay 24, 2023 - 6:59 a.m.
Type Confusion
2023-05-2406:59:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
hermes-engine
type confusion
insufficient checks
typeinference.cpp
arbitrary code execution
untrusted javascript
remote attacker
malicious content
hermes-engine is vulnerable to Type Confusion. A remote attacker is able to inject malicious content due to insufficient checks in TypeInference.cpp, which results in type confusion, leading arbitrary code execution via untrusted JavaScript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hermes-engine | le | 0.11.0 | |
| hermes-engine | le | 0.11.0 |
Related
cve
cve
CVE-2023-25933
2023-05-18 22:15:09
cvelist
cvelist
CVE-2023-25933
2023-05-18 21:24:58
nvd
nvd
CVE-2023-25933
2023-05-18 22:15:09
prion
prion
Type confusion
2023-05-18 22:15:00
osv
osv
CVE-2023-25933
2023-05-18 22:15:09