CVE-2021-24044
Assigner: facebook
Published: 2022-01-15T00:35:08
State: PUBLISHED
affected: product: Hermes
vendor: Facebook
versions: lessThan: unspecified
status: unaffected
version: 0.10.0
versionType: custom
lessThan: 0.10.0
status: affected
version: unspecified
versionType: custom
dateAssigned: 2021-12-07T00:00:00
descriptions: value: By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error, with a low chance of RCE. This issue affects Hermes versions prior to v0.10.0.
problemTypes: descriptions: cweId: CWE-843
description: CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
type: CWE