Name of the Vulnerable Software and Affected Versions Hermes (affected versions not specified)

Description A heap buffer overflow read issue has been identified. The crash occurs in the hermes::parser::JSLexer component, specifically in the consumeBracedCodePoint, consumeUnicodeEscape, and advance functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.