GitHub Advisoryadvisory · npm

GHSA-wxr3-2hgv-qm8f node-twain vulnerable to Improper Check or Handling of Exceptional Conditions

HIGH Published 2024-07-10 Modified 2024-07-10 Official page ↗
Aliases
CVE-2024-21525
Ecosystem
npm
Packages
node-twain
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L
Weaknesses
CWE-703
Reviewed
2024-07-10

Affected packages

• npm node-twain: <= 0.0.16 (no fix yet)

Description

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length >= 34 chars leads to a buffer overflow vulnerability.

Related

Alias · CVE (1)

  • CVE-2024-21525 All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the… vulnerability

Weakness · CWE (1)

  • CWE-703 Improper Check or Handling of Exceptional Conditions weakness

References