{"id":"CVE-2026-97724","revision":"0f529eff91ef4f85a4e432d03d7d7f32","records":[{"revision":"0f529eff91ef4f85a4e432d03d7d7f32","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-97724","aliases":[],"title":"A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a __proto__ property to modify the prototype of an object created during serialization in clonePlain…","description":"A prototype pollution vulnerability in Software Mansion React Native Worklets before 0.12.2 allows an attacker-controlled object containing a __proto__ property to modify the prototype of an object created during serialization in clonePlainJSObject in packages/react-native-worklets/src/memory/serializable.native.ts. When affected data is subsequently processed by React Native Worklets, the malformed serialized object can cause the React Native application to crash. This can result in a remotely triggered denial of service in applications that pass attacker-controlled data through the affected serialization path. In applications where the attacker-controlled data is persisted, the denial of service may persist across application restarts or repeated attempts to access the affected content.","state":0,"publishedAt":"2026-09-25T02:09:17.218+00:00","modifiedAt":"2026-09-25T13:55:20.329+00:00","affected":[{"ecosystem":"Vendor product","name":"React Native Reanimated","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"modules\": [\n                        \"react-native-worklets serialization\"\n                    ],\n                    \"packageURL\": \"pkg:npm/react-native-worklets\",\n                    \"platforms\": [\n                        \"Android\",\n                        \"iOS\"\n                    ],\n                    \"product\": \"React Native Reanimated\",\n                    \"programFiles\": [\n                        \"packages/react-native-worklets/src/memory/serializable.native.ts\"\n                    ],\n                    \"programRoutines\": [\n                        {\n                            \"name\": \"clonePlainJSObject\"\n                        }\n                    ],\n                    \"repo\": \"https://github.com/software-mansion/react-native-reanimated\",\n                    \"vendor\": \"swmansion\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"worklets-0.12.2\",\n                            \"status\": \"affected\",\n                            \"version\": \"worklets-0.5.0\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/R:U/V:D/RE:L","score":5.3,"severity":"MEDIUM"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","score":4.3,"severity":"MEDIUM"}],"references":["https://github.com/software-mansion/react-native-reanimated/issues/10436","https://github.com/software-mansion/react-native-reanimated/pull/10451","https://github.com/software-mansion/react-native-reanimated/pull/10462","https://github.com/software-mansion/react-native-reanimated/releases/tag/worklets-0.12.2","https://docs.swmansion.com/react-native-reanimated/"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-97724","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-97724","identifiers":["CVE-2026-97724"]},"retained":false,"historicalAffected":[]}],"coverage":[]}