OSV 1.4.0 · github-reviewed · 修改于 2022-06-23 02:19
发布时间
2022-01-16 08:00
GitHub 审查时间
2022-06-23 02:19
NVD 发布时间
2022-01-15 09:15
源文件
advisories/github-reviewed/2022/01/GHSA-7mhc-prgv-r3q4/GHSA-7mhc-prgv-r3q4.json
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error, with a low chance of RCE. This issue affects Hermes versions prior to v0.10.0.