by Kastro
Paper/Archive/CVE-2022-40138

CVE-2022-40138

Facebook Hermes — An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used…

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.5.685 × 2013.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An integer conversion error in Hermes bytecode generation, prior to commit 6aa825e480d48127b480b08d13adf70033237097, could have been used to perform Out-Of-Bounds operations and subsequently execute arbitrary code. Note that this is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.

Affected

ProductAffectedFixed inSource
Hermesunspecified – < commit prior to 6aa825e480d48127b480b08d13adf70033237097commit prior to 6aa825e480d48127b480b08d13adf70033237097CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgithub.com/facebook/hermes/commit/6aa825e480d48127b480b08d13adf70033237097reffacebook.com/security/advisories/CVE-2022-40138