Lucene search

K
redhatcveRedhat.comRH:CVE-2020-8174
HistoryJun 08, 2020 - 7:24 p.m.

CVE-2020-8174

2020-06-0819:24:42
redhat.com
access.redhat.com
14

0.014 Low

EPSS

Percentile

86.5%

A flaw was found in nodejs. Calling napi_get_value_string_latin1(), napi_get_value_string_utf8(), or napi_get_value_string_utf16() with a non-NULL buf, and a bufsize of 0 will cause the entire string value to be written to buf, probably overrunning the length of the buffer.