Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40748
HistoryMay 31, 2023 - 9:39 a.m.

Use-After-Free

2023-05-3109:39:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
hermes-engine javascript bug bytecode execution

AI Score

8

Confidence

High

EPSS

0.007

Percentile

80.9%

hermes-engine is vulnerable to Use-After-Free. When Hermes allows execution of untrusted JavaScript, an attacker is able to cause remote code execution due to a use-after-free bug, which is possible as a result of unsound inference in the bytecode generation when optimizations are enabled.

AI Score

8

Confidence

High

EPSS

0.007

Percentile

80.9%

Related for VERACODE:40748