Use-After-Free Vulnerability in Hermes Bytecode Generation
CVE-2023-30470
9.8CRITICAL
What is CVE-2023-30470?
A use-after-free vulnerability exists in the Hermes bytecode generation process when optimizations are enabled. An attacker could exploit this flaw to potentially execute arbitrary code remotely. Note that this exploit is primarily relevant when Hermes processes untrusted JavaScript code, meaning that most React Native applications are typically not at risk.
Affected Version(s)
Hermes 0