CVE-2018-3745

Summary

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.

Affected Software

VendorProductVersion RangeStatus
HackerOneatob node module<=2.0.3affected

Weaknesses

  • CWE-125: Out-of-bounds Read (CWE-125)

ADP Enrichment

CVE Program Container

Additional References

References