CVE-2023-23556

CVSS V2 None CVSS V3 None
Description
An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.
Overview
  • CVE ID
  • CVE-2023-23556
  • Assigner
  • cve-assign@fb.com
  • Vulnerability Status
  • Received
  • Published Version
  • 2023-05-18T22:15:09
  • Last Modified Date
  • 2023-05-18T22:15:09
History
Created Old Value New Value Data Type Notes
2023-05-18 23:00:50 Added to TrackCVE
2023-05-18 23:00:55 Weakness Enumeration new