Access of Resource Using Incompatible Type in Hermes
Critical severity
GitHub Reviewed
Published
Jan 16, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Jan 15, 2022
Published to the GitHub Advisory Database
Jan 16, 2022
Reviewed
Jun 22, 2022
Last updated
Jan 27, 2023
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error, with a low chance of RCE. This issue affects Hermes versions prior to v0.10.0.
References