CVE-2022-32234

State: Published
Severity: Not scored
Published: Oct 11, 2022
Updated: Aug 3, 2024
Reserved: Jun 2, 2022

Description

An out of bounds write in hermes, while handling large arrays, prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.

Scores

The record has no CVSS score.

Weaknesses

CWE-787 Out-of-Bounds Write

Affected Products

Product	Versions
HermesFacebook	before prior to commit 06eaec767e376bfdb883d912cb15e987ddf2bda1Affected

References

https://github.com/facebook/hermes/commit/06eaec767e376bfdb883d912cb15e987ddf2bda1
https://www.facebook.com/security/advisories/CVE-2022-32234

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.