GitHub Advisoryadvisory · npm

GHSA-327c-qx3v-h673 Always-Incorrect Control Flow Implementation in Facebook Hermes

CRITICAL Published 2022-05-24 Modified 2022-06-27 Official page ↗
Aliases
CVE-2020-1914
Ecosystem
npm
Packages
hermes-engine
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-1119, CWE-670
Reviewed
2022-06-24

Affected packages

• npm hermes-engine: < 0.7.2 → fixed in 0.7.2

Description

A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.

Related

Alias · CVE (1)

  • CVE-2020-1914 A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit… vulnerability

Weakness · CWE (2)

  • CWE-1119 Excessive Use of Unconditional Branching weakness
  • CWE-670 Always-Incorrect Control Flow Implementation weakness

References