GitHub Advisoryadvisory · npm

GHSA-7vhm-fmph-7wxw audify vulnerable to Improper Validation of Array Index

HIGH Published 2024-07-10 Modified 2024-07-10 Official page ↗
Aliases
CVE-2024-21522
Ecosystem
npm
Packages
audify
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-129
Reviewed
2024-07-10

Affected packages

• npm audify: <= 1.9.0 (no fix yet)

Description

All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder().decode or new OpusDecoder().decodeFloat functions it is not checked for negative values. This can lead to a process crash.

Related

Alias · CVE (1)

  • CVE-2024-21522 All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new… vulnerability

Weakness · CWE (1)

  • CWE-129 Improper Validation of Array Index weakness

References