CVE-2018-3745

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.

Score

CVSS 3.1 9.1 Critical

Status

Modified - support@hackerone.com

Published

2018-05-29

Last modified

2024-09-17

Weaknesses

CWE-125

Affected products

• Atob (Atob Project)
• Atob Node Module (Hackerone)

References

• https://hackerone.com/reports/321686
• https://security.netapp.com/advisory/ntap-20230622-0009/