An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit
    8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible
    further memory corruption via crafted JavaScript. Note that this is only exploitable if the application
    using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not
    affected. (CVE-2020-1915)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit
    b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or
    theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the
    application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications
    are not affected. (CVE-2020-1914)

  - An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit
    8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible
    further memory corruption via crafted JavaScript. Note that this is only exploitable if the application
    using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not
    affected. (CVE-2020-1915)

ID	Name	Product	Family	Severity
420281	SCA: security update for hermes-engine (GHSA-x4cf-6jr3-3qvp)	Tenable Cloud Security	SCA Checks	high
420281	SCA: security update for hermes-engine (GHSA-x4cf-6jr3-3qvp)	Tenable Self-Hosted Container Security	SCA Checks	high
404886	Alpine: multiple hermes packages: security update to 0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
404886	Alpine: multiple hermes packages: security update to 0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical

Detections

Analytics

CVE-2020-1915

high

Tenable Plugins

high

high

critical

critical