Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c3mx-jjr9-q7cc

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by an attacker to leak raw data from Hermes VM’s heap. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.

A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by an attacker to leak raw data from Hermes VM’s heap. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.

EPSS

Процентиль: 42%
0.00199
Низкий

7.5 High

CVSS3

Дефекты

CWE-125
CWE-416

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by an attacker to leak raw data from Hermes VM’s heap. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.

EPSS

Процентиль: 42%
0.00199
Низкий

7.5 High

CVSS3

Дефекты

CWE-125
CWE-416