A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit
    b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or
    theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the
    application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications
    are not affected. (CVE-2020-1914)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit
    b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or
    theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the
    application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications
    are not affected. (CVE-2020-1914)

  - An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit
    8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible
    further memory corruption via crafted JavaScript. Note that this is only exploitable if the application
    using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not
    affected. (CVE-2020-1915)

ID	Name	Product	Family	Severity
409194	SCA: security update for hermes-engine (GHSA-327c-qx3v-h673)	Tenable Cloud Security	SCA Checks	critical
409194	SCA: security update for hermes-engine (GHSA-327c-qx3v-h673)	Tenable Self-Hosted Container Security	SCA Checks	critical
404886	Alpine: multiple hermes packages: security update to 0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
404886	Alpine: multiple hermes packages: security update to 0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical

Detections

Analytics

CVE-2020-1914

critical

Tenable Plugins

critical

critical

critical

critical