GHSA-8w4h-3cm3-2pm2

ghsaUSosv

Out-of-bounds Read in atob

view advisory published 2018-10-09Licence: CC-BY-4.0

Versions of `atob` before 2.1.0 uninitialized Buffers when number is passed in input on Node.js 4.x and below. ## Recommendation Update to version 2.1.0 or later.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-3745US	critical9.1	2.14% (82nd)	—	2018-05-29
atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.

references

External citations — patches, advisories, analysis.

https://github.com/advisories/GHSA-8w4h-3cm3-2pm2ADVISORY
https://hackerone.com/reports/321686WEB
https://nvd.nist.gov/vuln/detail/CVE-2018-3745ADVISORY
https://security.netapp.com/advisory/ntap-20230622-0009WEB
https://www.npmjs.com/advisories/646WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan