Lucene search
Veracode Vulnerability DatabaseVERACODE:40744HistoryMay 31, 2023 - 7:58 a.m.
Use-After-Free
2023-05-3107:58:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
vulnerability
arbitrary code execution
javascript
bytecode optimization
bug
use-after-free
software
0.004 Low
EPSS
Percentile
74.2%
hermes-engine is vulnerable to Use-After-Free. When Hermes allows execution of untrusted JavaScript, an attacker is able to execute arbitrary code on the target system via a carefully crafted malicious payload, which is made possible due to a bytecode optimization bug, that results in use-after-free.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hermes-engine | le | 0.11.0 | |
| hermes-engine | le | 0.11.0 | |
| hermes-engine | le | 0.11.0 | |
| hermes-engine | le | 0.11.0 |
Related
cve
cve
CVE-2023-28081
2023-05-18 22:15:09
prion
prion
Design/Logic Flaw
2023-05-18 22:15:00
osv
osv
CVE-2023-28081
2023-05-18 22:15:09
cvelist
cvelist
CVE-2023-28081
2023-05-18 21:26:49
nvd
nvd
CVE-2023-28081
2023-05-18 22:15:09