Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-28445
HistoryMar 24, 2023 - 12:15 a.m.

Design/Logic Flaw

2023-03-2400:15:00
PRIOn knowledge base
www.prio-n.com
5
deno
javascript
typescript
v8
rust
arraybuffers
async
out-of-bound
read/write
exploit
deno 1.32.0
deno 1.32.1
deno 1.32.2
deno deploy
workaround

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the only version affected is Deno 1.32.0. Deno Deploy users are not affected. The problem has been resolved by disabling resizable ArrayBuffers temporarily in Deno 1.32.1. Deno 1.32.2 will re-enable resizable ArrayBuffers with a proper fix. As a workaround, run with --v8-flags=--no-harmony-rab-gsab to disable resizable ArrayBuffers.

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

Related for PRION:CVE-2023-28445