21 matches found
bigint-buffer-safe
bigint-buffer-safe Safe, pure-JS drop-in replacement for bigint-buffer. Fixes CVE-2025-3194 CVSS 7.5, buffer overflow / DoS. Zero dependencies. No native bindings. Works in Node.js and browsers. Why does this exist? The original bigint-buffer package has a high-severity buffer overflow...
bigint-buffer-js
bigint-buffer-js Drop-in replacement for [email protected] without the native binding. bigint-buffer ≤ 1.1.5 has a buffer overflow in the native toBigIntLE CVE-2025-3194 / GHSA-3gc7-fjrx-p6mg and no fixed version has been published. It is pulled in transitively by @solana/buffer-layout-utils...
CLSA-2026-1773879460 TuxCare security update for bigint-buffer (1 CVE)
TuxCare rebuilt bigint-buffer to address 1 CVE. Fixed in 1.1.5-tuxcare.1...
PT-2026-74022
TuxCare rebuilt bigint-buffer to address 1 CVE. Fixed in 1.1.5-tuxcare.1...
ROOT-APP-NPM-CVE-2025-3194 CVE-2025-3194 in @rootio/bigint-buffer - Patched by Root
Root has patched CVE-2025-3194 in the @rootio/bigint-buffer package for Root:npm. Multiple fixed versions available...
EUVD-2025-9701
Malicious code in bioql PyPI...
CVE-2025-3194
Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function
Versions of the package bigint-buffer from 0.0.0 to 1.1.5 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
0xppl-solana-portfolio (1.0.0), 0xuath-sdk-react (>=0.0.2, <=0.0.23) +6491 more potentially affected by CVE-2025-3194 via bigint-buffer (1.1.5)
bigint-buffer NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bigint-buffer and may be impacted: - 0xppl-solana-portfolio 1.0.0 - 0xuath-sdk-react =0.0.2, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1, =0.0.77, =0.2.0...
GHSA-3GC7-FJRX-P6MG bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function
Versions of the package bigint-buffer from 0.0.0 to 1.1.5 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
CVE-2025-3194
Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
CVE-2025-3194
Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
CVE-2025-3194
Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
CVE-2025-3194
Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
CVE-2025-3194
CVE-2025-3194 concerns the npm package bigint-buffer. The vulnerability affects versions starting at 0.0.0 and later, where the function toBigIntLE() contains a buffer overflow that can cause the application to crash. Multiple sources consistently describe the root cause as improper bounds checki...
CVE-2025-3194
Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
CVE-2025-3194
Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
bigint-buffer 安全漏洞
bigint-buffer is a buffer utility program by the individual developer Michael Wei. A security vulnerability exists in bigint-buffer that stems from a buffer overflow in the toBigIntLE function, which could cause the application to crash...
CVE-2025-3194: Buffer Copy without Checking Size of Input
Versions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE function. Attackers can exploit this to crash the application...
0xppl-solana-portfolio (1.0.0), 0xuath-sdk-react (>=0.0.2, <=0.0.23) +6491 more potentially affected by CVE-2025-3194 via bigint-buffer (1.1.5)
bigint-buffer NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on bigint-buffer and may be impacted: - 0xppl-solana-portfolio 1.0.0 - 0xuath-sdk-react =0.0.2, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.1, =0.0.77, =0.2.0...