未評価
An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacke...
CVE-2023-23556
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory facebook.com
- patch github.com