GHSA-3gc7-fjrx-p6mgHighCVSS 7.5

bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function

Published
April 4, 2025
Last Modified
April 4, 2025

🔗 CVE IDs covered (1)

📋 Description

Versions of the package bigint-buffer from 0.0.0 to 1.1.5 are vulnerable to Buffer Overflow in the toBigIntLE() function. Attackers can exploit this to crash the application.

🎯 Affected products1

  • npm/bigint-buffer:<= 1.1.5

🔗 References (5)