Softwarepub Hermes vulnerabilities

• software-metadata.pub hermes hermes's raw options logging may disclose secrets passed in via subcommand options argument CVE-2026-22798 Fix available 5.9 MediumJanuary 12, 2026
• facebook hermes A use-after-free related to unsound inference in the bytecode generation when optimizations are... CVE-2023-30470 9.8 CriticalMay 18, 2023
• facebook hermes A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81... CVE-2023-28081 9.8 CriticalMay 18, 2023
• facebook hermes A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could... CVE-2023-25933 9.8 CriticalMay 18, 2023
• facebook hermes A use-after-free in BigIntPrimitive addition in Hermes prior to commit... CVE-2023-24833 7.5 HighMay 18, 2023
• facebook hermes A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708... CVE-2023-24832 7.5 HighMay 18, 2023
• facebook hermes An error in Hermes' algorithm for copying objects properties prior to commit... CVE-2023-23557 9.8 CriticalMay 18, 2023
• facebook hermes An error in BigInt conversion to Number in Hermes prior to commit... CVE-2023-23556 9.8 CriticalMay 18, 2023
• facebook hermes An integer conversion error in Hermes bytecode generation, prior to commit... CVE-2022-40138 9.8 CriticalOctober 11, 2022
• facebook hermes A write-what-where condition in hermes caused by an integer overflow, prior to commit... CVE-2022-35289 9.8 CriticalOctober 11, 2022
• facebook hermes An out of bounds write in hermes, while handling large arrays, prior to commit... CVE-2022-32234 9.8 CriticalOctober 11, 2022
• facebook hermes It was possible to trigger an infinite recursion condition in the error handler when Hermes... CVE-2022-27810 7.5 HighOctober 6, 2022
• facebook hermes Access of Resource Using Incompatible Type in Hermes CVE-2021-24044 Fix available 9.8 CriticalJanuary 15, 2022
• facebook hermes A type confusion vulnerability could be triggered when resolving the "typeof" unary operator in... CVE-2021-24045 9.8 CriticalDecember 13, 2021
• facebook hermes Use After Free in Hermes CVE-2021-24037 Fix available 9.8 CriticalJune 15, 2021
• facebook hermes A stack overflow vulnerability in Facebook Hermes ‘builtin apply’ prior to commit... CVE-2020-1896 9.8 CriticalFebruary 2, 2021
• facebook hermes Out-of-bounds Read in Facebook Hermes CVE-2020-1915 Fix available 7.5 HighOctober 26, 2020
• facebook hermes Always-Incorrect Control Flow Implementation in Facebook Hermes CVE-2020-1914 Fix available 9.8 CriticalOctober 8, 2020
• facebook hermes Signed to Unsigned Conversion Error in Facebook Hermes CVE-2020-1913 Fix available 8.1 HighSeptember 9, 2020
• facebook hermes Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes CVE-2020-1912 Fix available 8.1 HighSeptember 9, 2020
• facebook hermes Access of Resource Using Incompatible Type in Facebook Hermes CVE-2020-1911 Fix available 9.8 CriticalSeptember 4, 2020