VYPR
← All advisories
Critical severity9.8NVD Advisory· Published May 18, 2023· Updated Jun 17, 2026

CVE-2023-23556

CVE-2023-23556

Description

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted JavaScript. Hence, most React Native applications are not affected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Facebook/Hermesllm-fuzzy3 versions
    <a6dcafe6ded8e61658b40f5699878cd19a481f80+ 2 more
    • (no CPE)range: <a6dcafe6ded8e61658b40f5699878cd19a481f80
    • cpe:2.3:a:facebook:hermes:*:*:*:*:*:*:*:*range: <2023-02-02
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.