rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-1843 
Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX version 1.0.0.71(SP2), and OSCA-550X version 1.0.0.71(SP2) have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physical access methods. Successful exploitation may cause the attacker perform an illegal operation.
Problem types: description: Insufficient Authentication
Affected products: vendor: Huawei
product: HEGE-560
vendor: Huawei
product: OSCA-550
vendor: Huawei
product: OSCA-550A
vendor: Huawei
product: OSCA-550AX
vendor: Huawei
product: OSCA-550X
Published: 2020-02-18T02:14:55.000Z
CVE-2020-1844 
PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.
Problem types: description: Privilege Escalation
Affected products: vendor: n/a
product: PCManager
Published: 2020-02-28T18:52:38.000Z
CVE-2020-1845 
Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.
Problem types: description: Local Privilege Escalation
Affected products: vendor: Huawei
product: PCManager
Published: 2020-04-27T14:26:45.000Z
CVE-2020-1847 
There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500
Published: 2020-11-13T14:50:23.000Z
CVE-2020-1848 
There is a resource management error vulnerability in Jackman-AL00D versions 8.2.0.185(C00R2P1). Local attackers construct malicious application files, causing system applications to run abnormally.
Problem types: description: Resource Management Errors
Affected products: vendor: Huawei
product: Jackman-AL00D
Published: 2020-12-29T17:55:19.000Z
CVE-2020-1853 
GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage.
Problem types: description: Path Traversal
Affected products: vendor: Huawei
product: GaussDB 200
Published: 2020-02-17T20:55:38.000Z
CVE-2020-1855 
Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal.
Problem types: description: Insufficient Verification
Affected products: vendor: Huawei
product: HEGE-570
vendor: Huawei
product: HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, OSCA-550X
Published: 2020-02-18T02:28:18.000Z
CVE-2020-1856 
Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage.
Problem types: description: Information leakage
Affected products: vendor: Huawei
product: NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, USG9500
Published: 2020-02-17T20:27:50.000Z
CVE-2020-1857 
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. Due to improper processing of some data, a local authenticated attacker can exploit this vulnerability through a series of operations. Successful exploitation may cause information leakage.
Problem types: description: Information leakage
Affected products: vendor: Huawei
product: NIP6800
vendor: Huawei
product: Secospace USG6600
vendor: Huawei
product: USG9500
Published: 2020-02-17T20:01:03.000Z
CVE-2020-1858 
Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service.
Problem types: description: Denial of Service
Affected products: vendor: Huawei
product: NIP6800
vendor: Huawei
product: Secospace USG6600
vendor: Huawei
product: USG9500
Published: 2020-02-17T19:30:02.000Z
CVE-2020-1860 
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the access control to be bypassed, and attackers can directly access the Internet.
Problem types: description: Access Control Bypass
Affected products: vendor: n/a
product: NIP6800;Secospace USG6600;USG9500
Published: 2020-02-28T18:28:16.000Z
CVE-2020-1861 
CloudEngine 12800 with versions of V200R001C00SPC600,V200R001C00SPC700,V200R002C01,V200R002C50SPC800,V200R002C50SPC800PWE,V200R003C00SPC810,V200R003C00SPC810PWE,V200R005C00SPC600,V200R005C00SPC800,V200R005C00SPC800PWE,V200R005C10,V200R005C10SPC300 have an information leakage vulnerability in some Huawei products. In some special cases, an authenticated attacker can exploit this vulnerability because the software processes data improperly. Successful exploitation may lead to information leakage.
Problem types: description: Information Leakage
Affected products: vendor: n/a
product: CloudEngine 12800
Published: 2020-02-28T18:37:30.000Z
CVE-2020-1862 
There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions V100R019C00;ManageOne versions 6.5.RC2.B050.
Problem types: description: Double Free
Affected products: vendor: n/a
product: CampusInsight;ManageOne
Published: 2020-03-20T14:45:37.000Z
CVE-2020-1863 
Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. Due to a logical flaw in a JSON parsing routine, a remote, unauthenticated attacker could exploit this vulnerability to disrupt service in the affected products.
Problem types: description: Out of Bounds Read
Affected products: vendor: Huawei
product: Huawei USG6000V
Published: 2020-03-12T22:01:20.000Z
CVE-2020-1864 
Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.
Problem types: description: Improper Authentication
Affected products: vendor: n/a
product: Secospace AntiDDoS8000
Published: 2020-03-20T14:58:57.000Z
CVE-2020-1865 
There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.
Problem types: description: Out-of-Bounds Read
Affected products: vendor: n/a
product: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
Published: 2021-01-13T22:20:20.000Z
CVE-2020-1866 
There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500,V500R005C00;S12700 versions V200R008C00;S2700 versions V200R008C00;S5700 versions V200R008C00;S6700 versions V200R008C00;S7700 versions V200R008C00;S9700 versions V200R008C00;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00;USG9500 versions V500R001C30SPC300,V500R001C30SPC600,V500R001C60SPC500,V500R005C00.
Problem types: description: Out of Bounds Read
Affected products: vendor: n/a
product: NIP6800;S12700;S2700;S5700;S6700;S7700;S9700;Secospace USG6600;USG9500
Published: 2021-01-13T22:22:04.000Z
CVE-2020-1870 
There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.
Problem types: description: Denial of Service
Affected products: vendor: Huawei
product: CloudEngine 12800
vendor: Huawei
product: CloudEngine 5800
vendor: Huawei
product: CloudEngine 6800
vendor: Huawei
product: CloudEngine 7800
vendor: Huawei
product: NE40E
vendor: Huawei
product: NE40E-F
vendor: Huawei
product: NE40E-M
Published: 2020-05-29T19:13:26.000Z
CVE-2020-1871 
USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; V500R005C00SPC200 have an improper credentials management vulnerability. The software does not properly manage certain credentials. Successful exploit could cause information disclosure or damage, and impact the confidentiality or integrity.
Problem types: description: Improper Credentials Management
Affected products: vendor: n/a
product: USG9500
Published: 2020-01-03T14:25:18.000Z
CVE-2020-1872 
Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), earlier than 9.1.0.252(C432E4R1P9T8), and earlier than 9.1.0.255(C576E6R1P8T8) have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance mode, an attacker can perform some operations to bypass the startup wizard, and then open some switch. As a result, the digital balance function is bypassed.
Problem types: description: Digital Balance Bypass
Affected products: vendor: Huawei
product: HUAWEI P10 Plus
Published: 2020-02-18T01:44:14.000Z
CVE-2020-1873 
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the device reboot.
Problem types: description: Out-of-bounds Read
Affected products: vendor: n/a
product: NIP6800;Secospace USG6600;USG9500
Published: 2020-02-28T18:14:50.000Z
CVE-2020-1874 
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause certain process reboot.
Problem types: description: Invalid Pointer Access
Affected products: vendor: n/a
product: NIP6800;Secospace USG6600;USG9500
Published: 2020-02-28T18:21:52.000Z
CVE-2020-1875 
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain process reboot. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500;USG9500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500.
Problem types: description: Invalid Pointer Access
Affected products: vendor: n/a
product: NIP6800;Secospace USG6600;USG9500
Published: 2020-02-28T18:05:21.000Z
CVE-2020-1876 
NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot.
Problem types: description: Out-of-bounds Write
Affected products: vendor: n/a
product: NIP6800;Secospace USG6600;USG9500
Published: 2020-02-28T18:42:04.000Z
CVE-2020-1877 
NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot.
Problem types: description: Invalid Pointer Access
Affected products: vendor: n/a
product: NIP6800;Secospace USG6600;USG9500
Published: 2020-02-28T18:48:56.000Z
CVE-2020-1878 
Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.
Problem types: description: Improper Authentication
Affected products: vendor: n/a
product: OxfordS-AN00A
Published: 2020-03-20T14:50:22.000Z
CVE-2020-1879 
There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions 1.0.1.21(SP3);HEGE-570 versions 1.0.1.22(SP3);OSCA-550 versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(SP3).
Problem types: description: Improper Integrity Checking
Affected products: vendor: n/a
product: HEGE-560;HEGE-570;OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X
Published: 2020-03-20T15:02:28.000Z
CVE-2020-1880 
Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal.
Problem types: description: Denial of Service
Affected products: vendor: Huawei
product: Lion-AL00C
Published: 2020-04-27T15:14:32.000Z
CVE-2020-1881 
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource management error vulnerability. An attacker needs to perform specific operations to trigger a function of the affected device. Due to improper resource management of the function, the vulnerability can be exploited to cause service abnormal on affected devices.
Problem types: description: Resource Management Error
Affected products: vendor: n/a
product: NIP6800;Secospace USG6600;USG9500
Published: 2020-02-28T18:33:30.000Z
CVE-2020-1882 
Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 versions earlier than 10.0.0.175(C00E59R2P11) have an improper authorization vulnerability. Due to improper authorization of some function, attackers can bypass the authorization to perform some operations.
Problem types: description: Improper Authorization
Affected products: vendor: Huawei
product: Ever-L29B
vendor: Huawei
product: HUAWEI Mate 20 RS
vendor: Huawei
product: HUAWEI Mate 20 X
vendor: Huawei
product: Honor Magic2
Published: 2020-02-17T23:43:27.000Z
CVE-2020-1883 
Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exploits this vulnerability by continuously performing specific operations. Successful exploitation of this vulnerability can cause service abnormal.
Problem types: description: Memory Leak
Affected products: vendor: n/a
product: NIP6800
vendor: n/a
product: Secospace USG6600
vendor: n/a
product: USG9500
Published: 2020-06-05T14:19:43.000Z
CVE-2020-1885 
Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file.
Problem types: description: Elevation of Privilege
Affected products: vendor: Facebook
product: Oculus Desktop
Published: 2020-04-08T19:55:12.000Z
CVE-2020-1886 
A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call.
Problem types: cwe_id: CWE-120
description: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp Business for Android
Published: 2020-09-03T21:10:18.000Z
CVE-2020-1887 
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
Problem types: cwe_id: CWE-297
description: Improper Validation of Certificate with Host Mismatch (CWE-297)
Affected products: vendor: Facebook
product: Osquery
Published: 2020-03-12T23:50:15.000Z
CVE-2020-1888 
Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.
Problem types: cwe_id: CWE-125
description: Out-of-bounds Read (CWE-125)
Affected products: vendor: Facebook
product: HHVM
Published: 2020-03-03T15:00:25.000Z
CVE-2020-1889 
A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process.
Problem types: cwe_id: CWE-265
description: Privilege / Sandbox Issues (CWE-265)
Affected products: vendor: Facebook
product: WhatsApp Desktop
Published: 2020-09-03T21:10:18.000Z
CVE-2020-1890 
A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction.
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Facebook
product: WhatsApp for Android
vendor: Facebook
product: WhatsApp Business for Android
Published: 2020-09-03T21:10:18.000Z
CVE-2020-1891 
A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices.
Problem types: cwe_id: CWE-787
description: Out-of-bounds Write (CWE-787)
Affected products: vendor: Facebook
product: WhatsApp Android
vendor: Facebook
product: WhatsApp Business for Android
vendor: Facebook
product: WhatsApp iPhone
vendor: Facebook
product: WhatsApp Business for iPhone
Published: 2020-09-03T21:10:19.000Z
CVE-2020-1892 
Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.
Problem types: cwe_id: CWE-125
description: Out-of-bounds Read (CWE-125)
Affected products: vendor: Facebook
product: HHVM
Published: 2020-03-03T15:00:26.000Z
CVE-2020-1893 
Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.
Problem types: cwe_id: CWE-125
description: Out-of-bounds Read (CWE-125)
Affected products: vendor: Facebook
product: HHVM
Published: 2020-03-03T15:00:26.000Z
CVE-2020-1894 
A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message.
Problem types: cwe_id: CWE-787
description: Out-of-bounds Write (CWE-787)
Affected products: vendor: Facebook
product: WhatsApp Android
vendor: Facebook
product: WhatsApp Business for Android
vendor: Facebook
product: WhatsApp iPhone
vendor: Facebook
product: WhatsApp Business for iPhone
Published: 2020-09-03T21:10:19.000Z
CVE-2020-1895 
A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128.
Problem types: cwe_id: CWE-680
description: Integer Overflow to Buffer Overflow (CWE-680)
Affected products: vendor: Facebook
product: Instagram for Android
Published: 2020-04-09T16:20:12.000Z
CVE-2020-1896 
A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2 (https://github.com/facebook/hermes/commit/86543ac47e59c522976b5632b8bf9a2a4583c7d2) allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
Problem types: cwe_id: CWE-121
description: CWE-121: Stack-based Buffer Overflow
Affected products: vendor: Facebook
product: Hermes
Published: 2021-02-02T06:50:11.000Z