Lucene search
Veracode Vulnerability DatabaseVERACODE:40743HistoryMay 31, 2023 - 6:30 a.m.
Use-After-Free
2023-05-3106:30:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
hermes-engine
use-after-free
javascript
attacker
bigintprimitive
heap
0.001 Low
EPSS
Percentile
50.5%
hermes-engine is vulnerable to Use-After-Free. When Hermes allows execution of untrusted JavaScript, an attacker is able to leak raw data from Hermes VM’s heap due to a use-after-free in BigIntPrimitive addition.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hermes-engine | le | 0.11.0 | |
| hermes-engine | le | 0.11.0 | |
| hermes-engine | le | 0.11.0 | |
| hermes-engine | le | 0.11.0 |
Related
prion
prion
Design/Logic Flaw
2023-05-18 22:15:00
cvelist
cvelist
CVE-2023-24833
2023-05-18 21:24:11
cve
cve
CVE-2023-24833
2023-05-18 22:15:09
osv
osv
CVE-2023-24833
2023-05-18 22:15:09
nvd
nvd
CVE-2023-24833
2023-05-18 22:15:09
alpinelinux
alpinelinux
CVE-2023-24833
2023-05-18 22:15:09