Null Pointer Dereference Vulnerability in Hermes by Facebook
CVE-2023-24832
7.5HIGH
What is CVE-2023-24832?
A null pointer dereference vulnerability exists in Hermes that allows attackers to potentially crash the runtime when the EnableHermesInternal configuration is enabled. This vulnerability is particularly relevant in scenarios where Hermes processes untrusted JavaScript. Most React Native applications, however, are not affected due to typical usage patterns that do not execute untrusted code in this environment.
Affected Version(s)
Hermes 0 < 5cae9f72975cf0e5a62b27fdd8b01f103e198708