GitHub Advisoryadvisory · npm

GHSA-8w4h-3cm3-2pm2 Out-of-bounds Read in atob

CRITICAL Published 2018-10-09 Modified 2023-03-01 Official page ↗
Aliases
CVE-2018-3745
Ecosystem
npm
Packages
atob
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Weaknesses
CWE-125
Reviewed
2020-06-16

Affected packages

• npm atob: < 2.1.0 → fixed in 2.1.0

Description

Versions of `atob` before 2.1.0 uninitialized Buffers when number is passed in input on Node.js 4.x and below. Recommendation Update to version 2.1.0 or later.

Related

Alias · CVE (1)

  • CVE-2018-3745 atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below. vulnerability

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References