zireael-n/node-weakauras-parser · Security
Buffer Overflow in node-weakauras-parser
- GHSA ID
- GHSA-86mr-6m89-vgj3
- Severity
- medium
- Published
- Updated
Description
Affected versions of node-weakauras-parser are vulnerable to a Buffer Overflow. The encode_weakaura function fails to properly validate the input size. A buffer of 13835058055282163711 bytes causes an overflow on 64-bit systems.
Recommendation
Upgrade to versions 1.0.5, 2.0.2, 3.0.1 or later.
CWEs
- CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')