Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2022-27810

UNKNOWN
Published 2022-10-06T00:00:00
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2022-27810. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode (when asserts were enabled). This issue affects Hermes versions prior to v0.12.0.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Facebook

Hermes

Affected Versions:

0.12.0 unspecified

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-jpvx-hr4h-p665

Advisory Details

It was possible to trigger an infinite recursion condition in the error handler when Hermes executed specific maliciously formed JavaScript. This condition was only possible to trigger in dev-mode (when asserts were enabled). This issue affects Hermes versions prior to v0.12.0.

CVSS Scoring

CVSS Score

7.5

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-27810
WEB https://www.facebook.com/security/advisories/cve-2022-27810

Advisory provided by GitHub Security Advisory Database. Published: October 7, 2022, Modified: October 11, 2022

References

https://www.facebook.com/security/advisories/cve-2022-27810
Published: 2022-10-06T00:00:00
Last Modified: 2024-08-03T05:32:59.901Z
Copied to clipboard!