Skip to content
OpenAdvisories
Critical · 9.1 CVE-2018-3745 EUVD-2018-0556GHSA-8w4h-3cm3-2pm2

Out-of-bounds Read in atob

Published May 29, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Vendor: HackerOne Product: atob node module Package: atob Ecosystem: npm

Description

atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below.

Affected products

VendorProductAffectedFixed
HackerOne atob node module <=2.0.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm atob < 2.1.0 2.1.0 GHSA-8w4h-3cm3-2pm2

Advisories 1

References