Vulnerability of the functions napi_get_value_string_latin1(), napi_get_value_string_utf8(), and napi_get_value_string_utf16 on the Node.js software platform, allowing a hacker to execute arbitrary code.

🗓️ 29 Sep 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Node.js vulnerabilities in napi_get_value_string_latin1, utf8, and utf16 allow out-of-bounds memory access and remote code execution.

Reporter	Title	Published	Views	Family All 193
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Pak for Data - Node.js (CVE-2020-8172, CVE-2020-8174, CVE-2020-11080)	7 Oct 202006:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	15 Jun 202022:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Spectrum Control (CVE-2020-8172, CVE-2020-8174, CVE-2020-11080)	23 Mar 202222:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics Workspace	3 Nov 202015:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by multiple Node.js vulnerabilities.	15 Sep 202016:30	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight - Cloud Native Event Analytics is affected by a International Components for Unicode (ICU) for C/C++ vulnerability (CVE-2020-10531)	13 Aug 202013:19	–	ibm
IBM Security Bulletins	Security Bulletin: Version 10.19.0 of Node.js included in IBM Netcool Operations Insight 1.6.0.x has several security vulnerabilities	7 Aug 202011:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Node.js affect IBM App Connect Enterprise V11	29 Jul 202007:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Integration is affected by multiple Node.js vulnerabilities	4 Aug 202009:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js affect IBM Spectrum Protect Plus (CVE-2020-10531, CVE-2020-8172, CVE-2020-8174, CVE-2020-11080)	3 Aug 202022:56	–	ibm

Vulners

Node

novell suse_openstack_cloudMatch7

novell suse_linux_enterprise_module_for_web_scriptingMatch12

novell suse_linux_enterprise_high_performance_computingMatch15-espos

novell suse_linux_enterprise_high_performance_computingMatch15-ltss

node.js node.jsRange<10.21.0

node.js node.jsRange12.0.0–12.18.0

node.js node.jsRange14.0.0–14.4.0

oracle financial_services_applicationsMatch14.3.0

oracle financial_services_applicationsMatch14.4.0

red_hat red_hat_enterprise_linuxMatch8

novell opensuse_leapMatch15.1

novell suse_linux_enterprise_server_for_sap_applicationsMatch15

novell suse_linux_enterprise_serverMatch15-ltss

Source	Link
vuldb	www.vuldb.com/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-8174
hackerone	www.hackerone.com/reports/784186
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-8174
suse	www.suse.com/security/cve/CVE-2020-8174/
access	www.access.redhat.com/security/cve/cve-2020-8174
oracle	www.oracle.com/security-alerts/cpujan2021.html
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16
web	www.web.nvd.nist.gov/view/vuln/detail

20 Jan 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 27.6

CVSS 38.1

EPSS0.01491